open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:17 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) 09:25:17 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:17 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) 09:25:17 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:17 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:17 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:17 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:17 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) [ 50.820223][ T4052] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 50.831690][ T4052] CPU: 1 PID: 4052 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 50.842048][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 50.852101][ T4052] Call Trace: [ 50.855367][ T4052] [ 50.858306][ T4052] dump_stack_lvl+0xda/0x130 [ 50.862965][ T4052] dump_stack+0x15/0x20 [ 50.867124][ T4052] dump_header+0x82/0x2d0 [ 50.871444][ T4052] oom_kill_process+0x33a/0x4c0 [ 50.876297][ T4052] out_of_memory+0x9ca/0xbf0 [ 50.880895][ T4052] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 50.887130][ T4052] mem_cgroup_out_of_memory+0x139/0x190 [ 50.892859][ T4052] try_charge_memcg+0x75c/0xd30 [ 50.898374][ T4052] ? __swap_duplicate+0x29b/0x2b0 [ 50.904323][ T4052] ? radix_tree_lookup+0xf9/0x150 [ 50.909385][ T4052] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 50.915473][ T4052] __read_swap_cache_async+0x2f6/0x550 [ 50.921095][ T4052] swap_cluster_readahead+0x27c/0x4c0 [ 50.927088][ T4052] swapin_readahead+0xe9/0x7f0 [ 50.932096][ T4052] ? __filemap_get_folio+0x41a/0x5a0 [ 50.937830][ T4052] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 50.943698][ T4052] ? swap_cache_get_folio+0x6e/0x200 [ 50.949000][ T4052] do_swap_page+0x4a0/0x1670 [ 50.953756][ T4052] ? cgroup_rstat_updated+0x8c/0x1c0 [ 50.959145][ T4052] ? __rcu_read_lock+0x35/0x50 [ 50.964071][ T4052] ? pte_offset_map_nolock+0x124/0x1d0 [ 50.970238][ T4052] handle_mm_fault+0xa36/0x2dd0 [ 50.976946][ T4052] exc_page_fault+0x3ff/0x6c0 [ 50.984426][ T4052] asm_exc_page_fault+0x26/0x30 [ 50.989419][ T4052] RIP: 0033:0x7f552c4aace4 [ 50.993980][ T4052] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 51.013811][ T4052] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 51.020211][ T4052] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 51.028429][ T4052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 51.038524][ T4052] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 51.046609][ T4052] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000c82c [ 51.054686][ T4052] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000c4eb [ 51.063015][ T4052] [ 51.066208][ T4052] memory: usage 307200kB, limit 307200kB, failcnt 7424 [ 51.073438][ T4052] memory+swap: usage 307532kB, limit 9007199254740988kB, failcnt 0 [ 51.081456][ T4052] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 51.088997][ T4052] Memory cgroup stats for /syz2: [ 51.089412][ T4052] cache 4096 [ 51.097835][ T4052] rss 12288 [ 51.101201][ T4052] shmem 0 [ 51.104321][ T4052] mapped_file 0 [ 51.107986][ T4052] dirty 0 [ 51.110906][ T4052] writeback 12288 [ 51.114583][ T4052] workingset_refault_anon 719 [ 51.119257][ T4052] workingset_refault_file 0 [ 51.123848][ T4052] swap 339968 [ 51.127141][ T4052] swapcached 12288 [ 51.130844][ T4052] pgpgin 1500 [ 51.134147][ T4052] pgpgout 1496 [ 51.137528][ T4052] pgfault 3644 [ 51.140877][ T4052] pgmajfault 207 [ 51.144507][ T4052] inactive_anon 0 [ 51.148132][ T4052] active_anon 0 [ 51.151600][ T4052] inactive_file 4096 [ 51.155504][ T4052] active_file 0 [ 51.159027][ T4052] unevictable 0 [ 51.162475][ T4052] hierarchical_memory_limit 314572800 [ 51.167919][ T4052] hierarchical_memsw_limit 9223372036854771712 [ 51.174143][ T4052] total_cache 4096 [ 51.177846][ T4052] total_rss 12288 [ 51.181466][ T4052] total_shmem 0 [ 51.184959][ T4052] total_mapped_file 0 [ 51.188947][ T4052] total_dirty 0 [ 51.192530][ T4052] total_writeback 12288 [ 51.196728][ T4052] total_workingset_refault_anon 719 [ 51.201955][ T4052] total_workingset_refault_file 0 [ 51.206984][ T4052] total_swap 339968 [ 51.210784][ T4052] total_swapcached 12288 [ 51.215048][ T4052] total_pgpgin 1500 [ 51.218842][ T4052] total_pgpgout 1496 [ 51.222722][ T4052] total_pgfault 3644 [ 51.226638][ T4052] total_pgmajfault 207 [ 51.230698][ T4052] total_inactive_anon 0 [ 51.234919][ T4052] total_active_anon 0 [ 51.238902][ T4052] total_inactive_file 4096 [ 51.243414][ T4052] total_active_file 0 [ 51.247394][ T4052] total_unevictable 0 [ 51.251373][ T4052] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4052,uid=0 [ 51.266622][ T4052] Memory cgroup out of memory: Killed process 4052 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:18 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:18 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = fsmount(r2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, r14, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:18 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:18 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:18 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:18 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:18 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 51.730679][ T4092] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 51.742402][ T4092] CPU: 0 PID: 4092 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 51.752793][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 51.762876][ T4092] Call Trace: [ 51.766336][ T4092] [ 51.769267][ T4092] dump_stack_lvl+0xda/0x130 [ 51.774093][ T4092] dump_stack+0x15/0x20 [ 51.778284][ T4092] dump_header+0x82/0x2d0 [ 51.782868][ T4092] oom_kill_process+0x33a/0x4c0 [ 51.787808][ T4092] out_of_memory+0x9ca/0xbf0 [ 51.792519][ T4092] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 51.798885][ T4092] mem_cgroup_out_of_memory+0x139/0x190 [ 51.804446][ T4092] try_charge_memcg+0x75c/0xd30 [ 51.809396][ T4092] ? __swap_duplicate+0x29b/0x2b0 [ 51.814690][ T4092] ? radix_tree_lookup+0xf9/0x150 [ 51.819869][ T4092] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 51.826256][ T4092] __read_swap_cache_async+0x2f6/0x550 [ 51.831830][ T4092] swap_cluster_readahead+0x27c/0x4c0 [ 51.837242][ T4092] swapin_readahead+0xe9/0x7f0 [ 51.842186][ T4092] ? __filemap_get_folio+0x41a/0x5a0 [ 51.847675][ T4092] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 51.853389][ T4092] ? swap_cache_get_folio+0x6e/0x200 [ 51.858892][ T4092] do_swap_page+0x4a0/0x1670 [ 51.863600][ T4092] ? cgroup_rstat_updated+0x8c/0x1c0 [ 51.869100][ T4092] ? __rcu_read_lock+0x35/0x50 [ 51.873882][ T4092] ? pte_offset_map_nolock+0x124/0x1d0 [ 51.879378][ T4092] handle_mm_fault+0xa36/0x2dd0 [ 51.884284][ T4092] exc_page_fault+0x3ff/0x6c0 [ 51.888996][ T4092] asm_exc_page_fault+0x26/0x30 [ 51.894031][ T4092] RIP: 0033:0x7f552c4aace4 [ 51.898798][ T4092] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 51.918879][ T4092] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 51.924952][ T4092] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 51.932982][ T4092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 51.940976][ T4092] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 51.948935][ T4092] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000cbf9 [ 51.957069][ T4092] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000c8b8 [ 51.965227][ T4092] [ 51.968494][ T4092] memory: usage 307200kB, limit 307200kB, failcnt 7671 [ 51.975448][ T4092] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 51.983364][ T4092] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 51.990808][ T4092] Memory cgroup stats for /syz2: [ 51.990915][ T4092] cache 4096 [ 51.999130][ T4092] rss 12288 [ 52.002333][ T4092] shmem 0 [ 52.005293][ T4092] mapped_file 0 [ 52.008752][ T4092] dirty 0 [ 52.011746][ T4092] writeback 0 [ 52.015050][ T4092] workingset_refault_anon 755 [ 52.019728][ T4092] workingset_refault_file 0 [ 52.024247][ T4092] swap 204800 [ 52.027585][ T4092] swapcached 20480 [ 52.031327][ T4092] pgpgin 1565 [ 52.034640][ T4092] pgpgout 1559 [ 52.038003][ T4092] pgfault 3758 [ 52.041360][ T4092] pgmajfault 216 [ 52.044997][ T4092] inactive_anon 8192 [ 52.048885][ T4092] active_anon 4096 [ 52.052624][ T4092] inactive_file 0 [ 52.056267][ T4092] active_file 4096 [ 52.059974][ T4092] unevictable 0 [ 52.063466][ T4092] hierarchical_memory_limit 314572800 [ 52.068839][ T4092] hierarchical_memsw_limit 9223372036854771712 [ 52.075007][ T4092] total_cache 4096 [ 52.078714][ T4092] total_rss 12288 [ 52.082334][ T4092] total_shmem 0 [ 52.085901][ T4092] total_mapped_file 0 [ 52.089973][ T4092] total_dirty 0 [ 52.093433][ T4092] total_writeback 0 [ 52.097266][ T4092] total_workingset_refault_anon 755 [ 52.102543][ T4092] total_workingset_refault_file 0 [ 52.107668][ T4092] total_swap 204800 [ 52.111655][ T4092] total_swapcached 20480 [ 52.115910][ T4092] total_pgpgin 1565 [ 52.119762][ T4092] total_pgpgout 1559 [ 52.123775][ T4092] total_pgfault 3758 [ 52.127667][ T4092] total_pgmajfault 216 [ 52.131840][ T4092] total_inactive_anon 8192 [ 52.136376][ T4092] total_active_anon 4096 [ 52.140661][ T4092] total_inactive_file 0 [ 52.144992][ T4092] total_active_file 4096 [ 52.149396][ T4092] total_unevictable 0 [ 52.153484][ T4092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4092,uid=0 [ 52.168768][ T4092] Memory cgroup out of memory: Killed process 4092 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:19 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:19 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = fsmount(r2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, r14, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:19 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:19 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:19 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:19 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 52.618705][ T4138] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.630367][ T4138] CPU: 1 PID: 4138 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 52.640722][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 52.650773][ T4138] Call Trace: [ 52.654069][ T4138] [ 52.657073][ T4138] dump_stack_lvl+0xda/0x130 [ 52.661809][ T4138] dump_stack+0x15/0x20 [ 52.665979][ T4138] dump_header+0x82/0x2d0 [ 52.670375][ T4138] oom_kill_process+0x33a/0x4c0 [ 52.675246][ T4138] out_of_memory+0x9ca/0xbf0 [ 52.679838][ T4138] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 52.685926][ T4138] mem_cgroup_out_of_memory+0x139/0x190 [ 52.691632][ T4138] try_charge_memcg+0x75c/0xd30 [ 52.696611][ T4138] ? __swap_duplicate+0x29b/0x2b0 [ 52.701644][ T4138] ? radix_tree_lookup+0xf9/0x150 [ 52.707264][ T4138] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 52.713335][ T4138] __read_swap_cache_async+0x2f6/0x550 [ 52.718825][ T4138] swap_cluster_readahead+0x27c/0x4c0 [ 52.724260][ T4138] swapin_readahead+0xe9/0x7f0 [ 52.729030][ T4138] ? __filemap_get_folio+0x41a/0x5a0 [ 52.734303][ T4138] ? swap_cache_get_folio+0x6e/0x200 [ 52.739679][ T4138] do_swap_page+0x4a0/0x1670 [ 52.744313][ T4138] ? cgroup_rstat_updated+0x8c/0x1c0 [ 52.749658][ T4138] ? __rcu_read_lock+0x35/0x50 [ 52.754489][ T4138] ? pte_offset_map_nolock+0x124/0x1d0 [ 52.760045][ T4138] handle_mm_fault+0xa36/0x2dd0 [ 52.764901][ T4138] exc_page_fault+0x3ff/0x6c0 [ 52.769580][ T4138] asm_exc_page_fault+0x26/0x30 [ 52.774603][ T4138] RIP: 0033:0x7f552c4aace4 [ 52.779014][ T4138] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 52.798982][ T4138] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 52.805110][ T4138] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 52.813377][ T4138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 52.821334][ T4138] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 52.829364][ T4138] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000cf82 [ 52.837347][ T4138] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000cc41 [ 52.845396][ T4138] [ 52.848552][ T4138] memory: usage 307200kB, limit 307200kB, failcnt 7830 [ 52.855452][ T4138] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 52.863406][ T4138] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 52.870771][ T4138] Memory cgroup stats for /syz2: [ 52.870980][ T4138] cache 4096 [ 52.879234][ T4138] rss 12288 [ 52.882501][ T4138] shmem 0 [ 52.885585][ T4138] mapped_file 0 [ 52.889037][ T4138] dirty 0 [ 52.891964][ T4138] writeback 12288 [ 52.895756][ T4138] workingset_refault_anon 788 [ 52.900919][ T4138] workingset_refault_file 0 [ 52.905596][ T4138] swap 184320 [ 52.908944][ T4138] swapcached 12288 [ 52.912849][ T4138] pgpgin 1627 [ 52.916383][ T4138] pgpgout 1623 [ 52.919851][ T4138] pgfault 3887 [ 52.923227][ T4138] pgmajfault 225 [ 52.926783][ T4138] inactive_anon 0 [ 52.930460][ T4138] active_anon 0 [ 52.933924][ T4138] inactive_file 0 [ 52.937559][ T4138] active_file 4096 [ 52.941373][ T4138] unevictable 0 [ 52.945103][ T4138] hierarchical_memory_limit 314572800 [ 52.950529][ T4138] hierarchical_memsw_limit 9223372036854771712 [ 52.956745][ T4138] total_cache 4096 [ 52.960807][ T4138] total_rss 12288 [ 52.964709][ T4138] total_shmem 0 [ 52.968332][ T4138] total_mapped_file 0 [ 52.972300][ T4138] total_dirty 0 [ 52.975783][ T4138] total_writeback 12288 [ 52.979962][ T4138] total_workingset_refault_anon 788 [ 52.985448][ T4138] total_workingset_refault_file 0 [ 52.990658][ T4138] total_swap 184320 [ 52.994494][ T4138] total_swapcached 12288 [ 52.998735][ T4138] total_pgpgin 1627 [ 53.002524][ T4138] total_pgpgout 1623 [ 53.006430][ T4138] total_pgfault 3887 [ 53.010344][ T4138] total_pgmajfault 225 [ 53.014416][ T4138] total_inactive_anon 0 [ 53.018559][ T4138] total_active_anon 0 [ 53.022516][ T4138] total_inactive_file 0 [ 53.026973][ T4138] total_active_file 4096 [ 53.031258][ T4138] total_unevictable 0 [ 53.035319][ T4138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4138,uid=0 [ 53.050708][ T4138] Memory cgroup out of memory: Killed process 4138 (syz-executor.2) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:20 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:20 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = fsmount(r2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, r14, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:20 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:20 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:20 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:20 executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:20 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:20 executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 53.509778][ T4170] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 53.521193][ T4170] CPU: 0 PID: 4170 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 53.531597][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 53.541778][ T4170] Call Trace: [ 53.545056][ T4170] [ 53.547979][ T4170] dump_stack_lvl+0xda/0x130 [ 53.552591][ T4170] dump_stack+0x15/0x20 [ 53.556820][ T4170] dump_header+0x82/0x2d0 [ 53.561268][ T4170] oom_kill_process+0x33a/0x4c0 [ 53.566108][ T4170] out_of_memory+0x9ca/0xbf0 [ 53.570760][ T4170] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 53.576836][ T4170] mem_cgroup_out_of_memory+0x139/0x190 [ 53.582484][ T4170] try_charge_memcg+0x75c/0xd30 [ 53.587477][ T4170] ? __swap_duplicate+0x29b/0x2b0 [ 53.592526][ T4170] ? radix_tree_lookup+0xf9/0x150 [ 53.597540][ T4170] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 53.603714][ T4170] __read_swap_cache_async+0x2f6/0x550 [ 53.609193][ T4170] swap_cluster_readahead+0x27c/0x4c0 [ 53.614565][ T4170] swapin_readahead+0xe9/0x7f0 [ 53.619437][ T4170] ? __filemap_get_folio+0x41a/0x5a0 [ 53.624930][ T4170] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 53.631798][ T4170] ? swap_cache_get_folio+0x6e/0x200 [ 53.637101][ T4170] do_swap_page+0x4a0/0x1670 [ 53.641701][ T4170] ? cgroup_rstat_updated+0x8c/0x1c0 [ 53.647774][ T4170] ? __rcu_read_lock+0x35/0x50 [ 53.652625][ T4170] ? pte_offset_map_nolock+0x124/0x1d0 [ 53.658367][ T4170] handle_mm_fault+0xa36/0x2dd0 [ 53.663478][ T4170] exc_page_fault+0x3ff/0x6c0 [ 53.668335][ T4170] asm_exc_page_fault+0x26/0x30 [ 53.673809][ T4170] RIP: 0033:0x7f552c4aace4 [ 53.678643][ T4170] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 53.698743][ T4170] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 53.706252][ T4170] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 53.714357][ T4170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 53.722644][ T4170] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 53.730727][ T4170] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000d31f [ 53.738703][ T4170] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000cfde [ 53.746818][ T4170] [ 53.750694][ T4170] memory: usage 307200kB, limit 307200kB, failcnt 8248 [ 53.757757][ T4170] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 53.765993][ T4170] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 53.773421][ T4170] Memory cgroup stats for /syz2: [ 53.774220][ T4170] cache 4096 [ 53.783476][ T4170] rss 16384 [ 53.786625][ T4170] shmem 0 [ 53.789959][ T4170] mapped_file 0 [ 53.793469][ T4170] dirty 0 [ 53.796639][ T4170] writeback 12288 [ 53.800394][ T4170] workingset_refault_anon 817 [ 53.805091][ T4170] workingset_refault_file 0 [ 53.809788][ T4170] swap 245760 [ 53.813176][ T4170] swapcached 20480 [ 53.817255][ T4170] pgpgin 1686 [ 53.821161][ T4170] pgpgout 1680 [ 53.824736][ T4170] pgfault 4007 [ 53.828124][ T4170] pgmajfault 236 [ 53.831751][ T4170] inactive_anon 0 [ 53.835425][ T4170] active_anon 0 [ 53.838885][ T4170] inactive_file 4096 [ 53.842771][ T4170] active_file 0 [ 53.846253][ T4170] unevictable 0 [ 53.849741][ T4170] hierarchical_memory_limit 314572800 [ 53.855138][ T4170] hierarchical_memsw_limit 9223372036854771712 [ 53.861374][ T4170] total_cache 4096 [ 53.865272][ T4170] total_rss 16384 [ 53.869304][ T4170] total_shmem 0 [ 53.872754][ T4170] total_mapped_file 0 [ 53.876814][ T4170] total_dirty 0 [ 53.880366][ T4170] total_writeback 12288 [ 53.884600][ T4170] total_workingset_refault_anon 817 [ 53.889811][ T4170] total_workingset_refault_file 0 [ 53.895037][ T4170] total_swap 245760 [ 53.898931][ T4170] total_swapcached 20480 [ 53.903204][ T4170] total_pgpgin 1686 [ 53.907000][ T4170] total_pgpgout 1680 [ 53.911003][ T4170] total_pgfault 4007 [ 53.914923][ T4170] total_pgmajfault 236 [ 53.922206][ T4170] total_inactive_anon 0 [ 53.926452][ T4170] total_active_anon 0 [ 53.930606][ T4170] total_inactive_file 4096 [ 53.935131][ T4170] total_active_file 0 [ 53.939127][ T4170] total_unevictable 0 [ 53.943250][ T4170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4170,uid=0 [ 53.959007][ T4170] Memory cgroup out of memory: Killed process 4170 (syz-executor.2) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:21 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:21 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:21 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, 0xffffffffffffffff, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:21 executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:21 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:21 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:21 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:21 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:21 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:21 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 54.436818][ T4210] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 54.448429][ T4210] CPU: 1 PID: 4210 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 54.458753][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 54.468883][ T4210] Call Trace: [ 54.472239][ T4210] [ 54.475207][ T4210] dump_stack_lvl+0xda/0x130 [ 54.479893][ T4210] dump_stack+0x15/0x20 [ 54.484084][ T4210] dump_header+0x82/0x2d0 [ 54.488500][ T4210] oom_kill_process+0x33a/0x4c0 [ 54.493345][ T4210] out_of_memory+0x9ca/0xbf0 [ 54.497938][ T4210] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 54.504067][ T4210] mem_cgroup_out_of_memory+0x139/0x190 [ 54.509624][ T4210] try_charge_memcg+0x75c/0xd30 [ 54.515854][ T4210] ? __swap_duplicate+0x29b/0x2b0 [ 54.520954][ T4210] ? radix_tree_lookup+0xf9/0x150 [ 54.525967][ T4210] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 54.532094][ T4210] __read_swap_cache_async+0x2f6/0x550 [ 54.537553][ T4210] swap_cluster_readahead+0x27c/0x4c0 [ 54.542917][ T4210] swapin_readahead+0xe9/0x7f0 [ 54.547678][ T4210] ? __filemap_get_folio+0x41a/0x5a0 [ 54.552972][ T4210] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 54.558616][ T4210] ? swap_cache_get_folio+0x6e/0x200 [ 54.563923][ T4210] do_swap_page+0x4a0/0x1670 [ 54.568575][ T4210] ? cgroup_rstat_updated+0x8c/0x1c0 [ 54.573931][ T4210] ? __rcu_read_lock+0x35/0x50 [ 54.578746][ T4210] ? pte_offset_map_nolock+0x124/0x1d0 [ 54.584212][ T4210] handle_mm_fault+0xa36/0x2dd0 [ 54.589077][ T4210] exc_page_fault+0x3ff/0x6c0 [ 54.593832][ T4210] asm_exc_page_fault+0x26/0x30 [ 54.598819][ T4210] RIP: 0033:0x7f552c4aace4 [ 54.603345][ T4210] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 54.622983][ T4210] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 54.629061][ T4210] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 54.637035][ T4210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 54.645079][ T4210] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 54.653120][ T4210] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000d6ac [ 54.661610][ T4210] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000d36b [ 54.669659][ T4210] [ 54.672778][ T4210] memory: usage 307200kB, limit 307200kB, failcnt 8699 [ 54.679668][ T4210] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 54.687617][ T4210] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 54.695012][ T4210] Memory cgroup stats for /syz2: [ 54.695213][ T4210] cache 4096 [ 54.703590][ T4210] rss 12288 [ 54.706702][ T4210] shmem 0 [ 54.709689][ T4210] mapped_file 0 [ 54.713211][ T4210] dirty 0 [ 54.716188][ T4210] writeback 20480 [ 54.719902][ T4210] workingset_refault_anon 838 [ 54.724637][ T4210] workingset_refault_file 0 [ 54.729140][ T4210] swap 221184 [ 54.732428][ T4210] swapcached 20480 [ 54.736381][ T4210] pgpgin 1736 [ 54.739942][ T4210] pgpgout 1730 [ 54.743414][ T4210] pgfault 4146 [ 54.746810][ T4210] pgmajfault 242 [ 54.750361][ T4210] inactive_anon 20480 [ 54.754468][ T4210] active_anon 0 [ 54.757933][ T4210] inactive_file 4096 [ 54.761831][ T4210] active_file 0 [ 54.765360][ T4210] unevictable 0 [ 54.768825][ T4210] hierarchical_memory_limit 314572800 [ 54.774389][ T4210] hierarchical_memsw_limit 9223372036854771712 [ 54.780805][ T4210] total_cache 4096 [ 54.784605][ T4210] total_rss 12288 [ 54.788256][ T4210] total_shmem 0 [ 54.791715][ T4210] total_mapped_file 0 [ 54.795803][ T4210] total_dirty 0 [ 54.799256][ T4210] total_writeback 20480 [ 54.803470][ T4210] total_workingset_refault_anon 838 [ 54.809045][ T4210] total_workingset_refault_file 0 [ 54.814331][ T4210] total_swap 221184 [ 54.818237][ T4210] total_swapcached 20480 [ 54.822465][ T4210] total_pgpgin 1736 [ 54.826361][ T4210] total_pgpgout 1730 [ 54.830518][ T4210] total_pgfault 4146 [ 54.834664][ T4210] total_pgmajfault 242 [ 54.838807][ T4210] total_inactive_anon 20480 [ 54.843333][ T4210] total_active_anon 0 [ 54.847308][ T4210] total_inactive_file 4096 [ 54.851733][ T4210] total_active_file 0 [ 54.855854][ T4210] total_unevictable 0 [ 54.859841][ T4210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4210,uid=0 [ 54.875571][ T4210] Memory cgroup out of memory: Killed process 4210 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:22 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:22 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, 0xffffffffffffffff, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:22 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 55.417743][ T4254] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 55.429181][ T4254] CPU: 1 PID: 4254 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 55.439622][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 55.449753][ T4254] Call Trace: [ 55.453138][ T4254] [ 55.456116][ T4254] dump_stack_lvl+0xda/0x130 [ 55.460911][ T4254] dump_stack+0x15/0x20 [ 55.465145][ T4254] dump_header+0x82/0x2d0 [ 55.469518][ T4254] oom_kill_process+0x33a/0x4c0 [ 55.474396][ T4254] out_of_memory+0x9ca/0xbf0 [ 55.478987][ T4254] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 55.485072][ T4254] mem_cgroup_out_of_memory+0x139/0x190 [ 55.490611][ T4254] try_charge_memcg+0x75c/0xd30 [ 55.495525][ T4254] ? __swap_duplicate+0x29b/0x2b0 [ 55.500537][ T4254] ? radix_tree_lookup+0xf9/0x150 [ 55.505602][ T4254] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 55.511733][ T4254] __read_swap_cache_async+0x2f6/0x550 [ 55.517212][ T4254] swap_cluster_readahead+0x27c/0x4c0 [ 55.522696][ T4254] swapin_readahead+0xe9/0x7f0 [ 55.527486][ T4254] ? __filemap_get_folio+0x41a/0x5a0 [ 55.532810][ T4254] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 55.538488][ T4254] ? swap_cache_get_folio+0x6e/0x200 [ 55.543795][ T4254] do_swap_page+0x4a0/0x1670 [ 55.548491][ T4254] ? cgroup_rstat_updated+0x8c/0x1c0 [ 55.553780][ T4254] ? __rcu_read_lock+0x35/0x50 [ 55.558645][ T4254] ? pte_offset_map_nolock+0x124/0x1d0 [ 55.564218][ T4254] handle_mm_fault+0xa36/0x2dd0 [ 55.569165][ T4254] exc_page_fault+0x3ff/0x6c0 [ 55.573989][ T4254] asm_exc_page_fault+0x26/0x30 [ 55.578914][ T4254] RIP: 0033:0x7f552c4aace4 [ 55.584250][ T4254] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 55.604402][ T4254] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 55.610520][ T4254] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 55.618604][ T4254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 55.627114][ T4254] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 55.635637][ T4254] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000da61 [ 55.643745][ T4254] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000d720 [ 55.651914][ T4254] [ 55.655526][ T4254] memory: usage 307200kB, limit 307200kB, failcnt 9225 [ 55.662535][ T4254] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 55.671016][ T4254] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 55.678328][ T4254] Memory cgroup stats for /syz2: [ 55.678518][ T4254] cache 4096 [ 55.686753][ T4254] rss 12288 [ 55.689854][ T4254] shmem 0 [ 55.693073][ T4254] mapped_file 0 [ 55.696732][ T4254] dirty 0 [ 55.699797][ T4254] writeback 4096 [ 55.703428][ T4254] workingset_refault_anon 862 [ 55.708196][ T4254] workingset_refault_file 0 [ 55.712805][ T4254] swap 319488 [ 55.716119][ T4254] swapcached 12288 [ 55.719864][ T4254] pgpgin 1789 [ 55.723225][ T4254] pgpgout 1785 [ 55.726605][ T4254] pgfault 4273 [ 55.729981][ T4254] pgmajfault 250 [ 55.733574][ T4254] inactive_anon 8192 [ 55.738625][ T4254] active_anon 0 [ 55.742203][ T4254] inactive_file 0 [ 55.745951][ T4254] active_file 4096 [ 55.749678][ T4254] unevictable 0 [ 55.753199][ T4254] hierarchical_memory_limit 314572800 [ 55.758563][ T4254] hierarchical_memsw_limit 9223372036854771712 [ 55.764787][ T4254] total_cache 4096 [ 55.768599][ T4254] total_rss 12288 [ 55.772306][ T4254] total_shmem 0 [ 55.775899][ T4254] total_mapped_file 0 [ 55.779968][ T4254] total_dirty 0 [ 55.783653][ T4254] total_writeback 4096 [ 55.787803][ T4254] total_workingset_refault_anon 862 [ 55.793159][ T4254] total_workingset_refault_file 0 [ 55.798297][ T4254] total_swap 319488 [ 55.802162][ T4254] total_swapcached 12288 [ 55.806436][ T4254] total_pgpgin 1789 [ 55.811627][ T4254] total_pgpgout 1785 [ 55.815535][ T4254] total_pgfault 4273 [ 55.819468][ T4254] total_pgmajfault 250 [ 55.823541][ T4254] total_inactive_anon 8192 [ 55.828022][ T4254] total_active_anon 0 [ 55.831983][ T4254] total_inactive_file 0 [ 55.836141][ T4254] total_active_file 4096 [ 55.840377][ T4254] total_unevictable 0 [ 55.844433][ T4254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4254,uid=0 [ 55.859685][ T4254] Memory cgroup out of memory: Killed process 4254 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:23 executing program 5: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:23 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = pidfd_getfd(r5, r3, 0x0) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, r13, r2, 0xffffffffffffffff, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:23 executing program 5: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 0: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 5: syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:23 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(r0, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r0}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:23 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:23 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(r0, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r0}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:23 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:23 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:23 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:23 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r1 = fsmount(r0, 0x0, 0x7d) r2 = fsmount(r1, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r2}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r1}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r0}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:23 executing program 3: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 3: syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:24 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:24 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 3: syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:24 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:24 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 3: syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:24 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:24 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 57.303413][ T4381] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 57.315210][ T4381] CPU: 1 PID: 4381 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 57.325679][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 57.335889][ T4381] Call Trace: [ 57.340679][ T4381] [ 57.343777][ T4381] dump_stack_lvl+0xda/0x130 [ 57.348459][ T4381] dump_stack+0x15/0x20 [ 57.352691][ T4381] dump_header+0x82/0x2d0 [ 57.357024][ T4381] oom_kill_process+0x33a/0x4c0 [ 57.361912][ T4381] out_of_memory+0x9ca/0xbf0 [ 57.366593][ T4381] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 57.372662][ T4381] mem_cgroup_out_of_memory+0x139/0x190 [ 57.378300][ T4381] try_charge_memcg+0x75c/0xd30 [ 57.383174][ T4381] ? __swap_duplicate+0x29b/0x2b0 [ 57.388199][ T4381] ? radix_tree_lookup+0xf9/0x150 [ 57.393222][ T4381] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 57.399300][ T4381] __read_swap_cache_async+0x2f6/0x550 [ 57.404751][ T4381] swap_cluster_readahead+0x27c/0x4c0 [ 57.410189][ T4381] swapin_readahead+0xe9/0x7f0 [ 57.415005][ T4381] ? __filemap_get_folio+0x41a/0x5a0 [ 57.420308][ T4381] ? swap_cache_get_folio+0x6e/0x200 [ 57.425761][ T4381] do_swap_page+0x4a0/0x1670 [ 57.430365][ T4381] ? cgroup_rstat_updated+0x8c/0x1c0 [ 57.435698][ T4381] ? __rcu_read_lock+0x35/0x50 [ 57.440621][ T4381] ? pte_offset_map_nolock+0x124/0x1d0 [ 57.446146][ T4381] handle_mm_fault+0xa36/0x2dd0 [ 57.451170][ T4381] exc_page_fault+0x3ff/0x6c0 [ 57.456008][ T4381] asm_exc_page_fault+0x26/0x30 [ 57.461066][ T4381] RIP: 0033:0x7f552c51c0a3 [ 57.465486][ T4381] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 5e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 57.485238][ T4381] RSP: 002b:00007ffd3ef5acf8 EFLAGS: 00010293 [ 57.491386][ T4381] RAX: 00000000fffffffa RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 57.499373][ T4381] RDX: 00007ffd3ef5ad10 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.507514][ T4381] RBP: 00007f552c611980 R08: 0000000000000010 R09: 00007ffd3eff00b0 [ 57.515580][ T4381] R10: 0000000000000000 R11: 0000000000002676 R12: 000000000000e1d6 [ 57.524622][ T4381] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000de95 [ 57.532762][ T4381] [ 57.536743][ T4381] memory: usage 307200kB, limit 307200kB, failcnt 9734 [ 57.544054][ T4381] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 57.552045][ T4381] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 57.559531][ T4381] Memory cgroup stats for /syz2: [ 57.559733][ T4381] cache 4096 [ 57.568352][ T4381] rss 12288 [ 57.571642][ T4381] shmem 0 [ 57.574868][ T4381] mapped_file 0 [ 57.578376][ T4381] dirty 0 [ 57.581364][ T4381] writeback 12288 [ 57.585060][ T4381] workingset_refault_anon 970 [ 57.589873][ T4381] workingset_refault_file 0 [ 57.594441][ T4381] swap 200704 [ 57.597716][ T4381] swapcached 12288 [ 57.601440][ T4381] pgpgin 1984 [ 57.604849][ T4381] pgpgout 1980 [ 57.608440][ T4381] pgfault 4700 [ 57.611856][ T4381] pgmajfault 287 [ 57.615409][ T4381] inactive_anon 0 [ 57.619039][ T4381] active_anon 0 [ 57.622485][ T4381] inactive_file 4096 [ 57.626499][ T4381] active_file 0 [ 57.629981][ T4381] unevictable 0 [ 57.633552][ T4381] hierarchical_memory_limit 314572800 [ 57.638996][ T4381] hierarchical_memsw_limit 9223372036854771712 [ 57.645246][ T4381] total_cache 4096 [ 57.648958][ T4381] total_rss 12288 [ 57.652756][ T4381] total_shmem 0 [ 57.656245][ T4381] total_mapped_file 0 [ 57.660212][ T4381] total_dirty 0 [ 57.663752][ T4381] total_writeback 12288 [ 57.667957][ T4381] total_workingset_refault_anon 970 [ 57.673216][ T4381] total_workingset_refault_file 0 [ 57.678291][ T4381] total_swap 200704 [ 57.685493][ T4381] total_swapcached 12288 [ 57.689765][ T4381] total_pgpgin 1984 [ 57.693771][ T4381] total_pgpgout 1980 [ 57.697699][ T4381] total_pgfault 4700 [ 57.701599][ T4381] total_pgmajfault 287 [ 57.705786][ T4381] total_inactive_anon 0 [ 57.710103][ T4381] total_active_anon 0 [ 57.714244][ T4381] total_inactive_file 4096 [ 57.718724][ T4381] total_active_file 0 [ 57.723108][ T4381] total_unevictable 0 [ 57.727170][ T4381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4381,uid=0 [ 57.742699][ T4381] Memory cgroup out of memory: Killed process 4381 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:25 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:25 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:25 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:25 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:25 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 58.326198][ T4404] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 58.337626][ T4404] CPU: 1 PID: 4404 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 58.348003][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 58.358157][ T4404] Call Trace: [ 58.361482][ T4404] [ 58.364414][ T4404] dump_stack_lvl+0xda/0x130 [ 58.369472][ T4404] dump_stack+0x15/0x20 [ 58.373744][ T4404] dump_header+0x82/0x2d0 [ 58.378066][ T4404] oom_kill_process+0x33a/0x4c0 [ 58.382958][ T4404] out_of_memory+0x9ca/0xbf0 [ 58.387653][ T4404] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 58.393742][ T4404] mem_cgroup_out_of_memory+0x139/0x190 [ 58.399485][ T4404] try_charge_memcg+0x75c/0xd30 [ 58.404485][ T4404] ? __swap_duplicate+0x29b/0x2b0 [ 58.409529][ T4404] ? radix_tree_lookup+0xf9/0x150 [ 58.414591][ T4404] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 58.420900][ T4404] __read_swap_cache_async+0x2f6/0x550 [ 58.426389][ T4404] swap_cluster_readahead+0x27c/0x4c0 [ 58.431764][ T4404] swapin_readahead+0xe9/0x7f0 [ 58.436603][ T4404] ? __filemap_get_folio+0x41a/0x5a0 [ 58.441884][ T4404] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 58.447565][ T4404] ? swap_cache_get_folio+0x6e/0x200 [ 58.453000][ T4404] do_swap_page+0x4a0/0x1670 [ 58.457654][ T4404] ? cgroup_rstat_updated+0x8c/0x1c0 [ 58.463062][ T4404] ? __rcu_read_lock+0x35/0x50 [ 58.467859][ T4404] ? pte_offset_map_nolock+0x124/0x1d0 [ 58.473390][ T4404] handle_mm_fault+0xa36/0x2dd0 [ 58.478334][ T4404] exc_page_fault+0x3ff/0x6c0 [ 58.483027][ T4404] asm_exc_page_fault+0x26/0x30 [ 58.488344][ T4404] RIP: 0033:0x7f1f0c21fce4 [ 58.492838][ T4404] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 58.512534][ T4404] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 58.518680][ T4404] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 58.526664][ T4404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 58.534722][ T4404] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 58.542789][ T4404] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000e577 [ 58.550751][ T4404] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 000000000000e236 [ 58.558768][ T4404] [ 58.561868][ T4404] memory: usage 307200kB, limit 307200kB, failcnt 305 [ 58.568989][ T4404] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 58.576940][ T4404] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 58.584582][ T4404] Memory cgroup stats for /syz5: [ 58.585359][ T4404] cache 12288 [ 58.594001][ T4404] rss 8192 [ 58.597470][ T4404] shmem 0 [ 58.600416][ T4404] mapped_file 0 [ 58.603938][ T4404] dirty 0 [ 58.607228][ T4404] writeback 4096 [ 58.610815][ T4404] workingset_refault_anon 38 [ 58.615450][ T4404] workingset_refault_file 3 [ 58.620464][ T4404] swap 192512 [ 58.623872][ T4404] swapcached 8192 09:25:25 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:25 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:25 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 58.627601][ T4404] pgpgin 2767 [ 58.630884][ T4404] pgpgout 2762 [ 58.634438][ T4404] pgfault 6218 [ 58.637841][ T4404] pgmajfault 15 [ 58.641406][ T4404] inactive_anon 0 [ 58.645507][ T4404] active_anon 0 [ 58.649015][ T4404] inactive_file 0 [ 58.652844][ T4404] active_file 12288 [ 58.656690][ T4404] unevictable 0 [ 58.661602][ T4404] hierarchical_memory_limit 314572800 [ 58.667017][ T4404] hierarchical_memsw_limit 9223372036854771712 [ 58.673401][ T4404] total_cache 12288 [ 58.677217][ T4404] total_rss 8192 [ 58.680896][ T4404] total_shmem 0 [ 58.684392][ T4404] total_mapped_file 0 [ 58.688374][ T4404] total_dirty 0 [ 58.691823][ T4404] total_writeback 4096 [ 58.695993][ T4404] total_workingset_refault_anon 38 [ 58.701231][ T4404] total_workingset_refault_file 3 [ 58.706975][ T4404] total_swap 192512 [ 58.710870][ T4404] total_swapcached 8192 [ 58.715552][ T4404] total_pgpgin 2767 [ 58.719486][ T4404] total_pgpgout 2762 [ 58.723442][ T4404] total_pgfault 6218 [ 58.727378][ T4404] total_pgmajfault 15 [ 58.731580][ T4404] total_inactive_anon 0 [ 58.735861][ T4404] total_active_anon 0 [ 58.739940][ T4404] total_inactive_file 0 [ 58.744124][ T4404] total_active_file 12288 [ 58.748447][ T4404] total_unevictable 0 [ 58.752439][ T4404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4404,uid=0 [ 58.768635][ T4404] Memory cgroup out of memory: Killed process 4404 (syz-executor.5) total-vm:51688kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:26 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:26 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 58.939425][ T4435] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 58.951425][ T4435] CPU: 0 PID: 4435 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 58.962021][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 58.972537][ T4435] Call Trace: [ 58.975825][ T4435] [ 58.978764][ T4435] dump_stack_lvl+0xda/0x130 [ 58.983423][ T4435] dump_stack+0x15/0x20 09:25:26 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 58.987826][ T4435] dump_header+0x82/0x2d0 [ 58.992210][ T4435] oom_kill_process+0x33a/0x4c0 [ 58.997078][ T4435] out_of_memory+0x9ca/0xbf0 [ 59.001877][ T4435] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 59.008035][ T4435] mem_cgroup_out_of_memory+0x139/0x190 [ 59.013881][ T4435] try_charge_memcg+0x75c/0xd30 [ 59.018814][ T4435] ? __swap_duplicate+0x29b/0x2b0 [ 59.023878][ T4435] ? radix_tree_lookup+0xf9/0x150 [ 59.029148][ T4435] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 59.035296][ T4435] __read_swap_cache_async+0x2f6/0x550 [ 59.040786][ T4435] swap_cluster_readahead+0x27c/0x4c0 [ 59.046645][ T4435] swapin_readahead+0xe9/0x7f0 [ 59.052133][ T4435] ? __filemap_get_folio+0x41a/0x5a0 [ 59.058032][ T4435] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 59.064030][ T4435] ? swap_cache_get_folio+0x6e/0x200 [ 59.069378][ T4435] do_swap_page+0x4a0/0x1670 [ 59.074079][ T4435] ? cgroup_rstat_updated+0x8c/0x1c0 [ 59.079515][ T4435] ? __rcu_read_lock+0x35/0x50 [ 59.084304][ T4435] ? pte_offset_map_nolock+0x124/0x1d0 [ 59.089888][ T4435] handle_mm_fault+0xa36/0x2dd0 [ 59.094793][ T4435] exc_page_fault+0x3ff/0x6c0 [ 59.099550][ T4435] asm_exc_page_fault+0x26/0x30 [ 59.104503][ T4435] RIP: 0033:0x7f552c4aace4 [ 59.109097][ T4435] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 59.128934][ T4435] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010283 09:25:26 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:26 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:26 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) 09:25:26 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:26 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) [ 59.135373][ T4435] RAX: 0000000000000000 RBX: 00007f552c610050 RCX: 0000000000000000 [ 59.143602][ T4435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 59.151722][ T4435] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 59.160407][ T4435] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000e82d [ 59.168922][ T4435] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000e4ec [ 59.177088][ T4435] [ 59.180225][ T4435] memory: usage 307200kB, limit 307200kB, failcnt 10169 [ 59.187654][ T4435] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 59.196255][ T4435] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 59.203807][ T4435] Memory cgroup stats for /syz2: [ 59.210496][ T4435] cache 4096 [ 59.218928][ T4435] rss 12288 [ 59.222067][ T4435] shmem 0 [ 59.225040][ T4435] mapped_file 0 [ 59.228580][ T4435] dirty 0 [ 59.231504][ T4435] writeback 20480 [ 59.235254][ T4435] workingset_refault_anon 1026 [ 59.240012][ T4435] workingset_refault_file 0 [ 59.244974][ T4435] swap 167936 [ 59.248814][ T4435] swapcached 24576 [ 59.252551][ T4435] pgpgin 2098 [ 59.255944][ T4435] pgpgout 2091 [ 59.259312][ T4435] pgfault 4960 [ 59.262803][ T4435] pgmajfault 302 [ 59.266438][ T4435] inactive_anon 0 [ 59.270075][ T4435] active_anon 0 [ 59.273576][ T4435] inactive_file 0 [ 59.277232][ T4435] active_file 4096 [ 59.280947][ T4435] unevictable 0 [ 59.284490][ T4435] hierarchical_memory_limit 314572800 [ 59.289893][ T4435] hierarchical_memsw_limit 9223372036854771712 [ 59.296104][ T4435] total_cache 4096 [ 59.300198][ T4435] total_rss 12288 [ 59.303853][ T4435] total_shmem 0 [ 59.307342][ T4435] total_mapped_file 0 [ 59.311484][ T4435] total_dirty 0 [ 59.314993][ T4435] total_writeback 20480 [ 59.319325][ T4435] total_workingset_refault_anon 1026 [ 59.324805][ T4435] total_workingset_refault_file 0 [ 59.330012][ T4435] total_swap 167936 [ 59.333887][ T4435] total_swapcached 24576 [ 59.338174][ T4435] total_pgpgin 2098 [ 59.342263][ T4435] total_pgpgout 2091 [ 59.346845][ T4435] total_pgfault 4960 [ 59.350850][ T4435] total_pgmajfault 302 [ 59.355309][ T4435] total_inactive_anon 0 [ 59.359671][ T4435] total_active_anon 0 [ 59.363800][ T4435] total_inactive_file 0 [ 59.368042][ T4435] total_active_file 4096 [ 59.372277][ T4435] total_unevictable 0 [ 59.376451][ T4435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4435,uid=0 [ 59.392178][ T4435] Memory cgroup out of memory: Killed process 4435 (syz-executor.2) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 59.438372][ T4451] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 59.449891][ T4451] CPU: 1 PID: 4451 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 59.460305][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 59.470559][ T4451] Call Trace: [ 59.474250][ T4451] [ 59.477197][ T4451] dump_stack_lvl+0xda/0x130 [ 59.482164][ T4451] dump_stack+0x15/0x20 [ 59.486417][ T4451] dump_header+0x82/0x2d0 [ 59.490867][ T4451] oom_kill_process+0x33a/0x4c0 [ 59.495849][ T4451] out_of_memory+0x9ca/0xbf0 [ 59.500453][ T4451] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 59.507204][ T4451] mem_cgroup_out_of_memory+0x139/0x190 [ 59.512877][ T4451] try_charge_memcg+0x75c/0xd30 [ 59.517826][ T4451] ? mem_cgroup_swapin_charge_folio+0xf1/0x190 [ 59.524139][ T4451] ? radix_tree_lookup+0xf9/0x150 [ 59.529279][ T4451] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 59.535519][ T4451] __read_swap_cache_async+0x2f6/0x550 [ 59.541464][ T4451] swap_cluster_readahead+0x27c/0x4c0 [ 59.547253][ T4451] swapin_readahead+0xe9/0x7f0 [ 59.552048][ T4451] ? __filemap_get_folio+0x41a/0x5a0 [ 59.557367][ T4451] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 59.563300][ T4451] ? swap_cache_get_folio+0x6e/0x200 [ 59.569616][ T4451] do_swap_page+0x4a0/0x1670 [ 59.574200][ T4451] ? cgroup_rstat_updated+0x8c/0x1c0 [ 59.580006][ T4451] ? __rcu_read_lock+0x35/0x50 [ 59.585350][ T4451] ? pte_offset_map_nolock+0x124/0x1d0 [ 59.590813][ T4451] handle_mm_fault+0xa36/0x2dd0 [ 59.595773][ T4451] exc_page_fault+0x3ff/0x6c0 [ 59.600681][ T4451] asm_exc_page_fault+0x26/0x30 [ 59.605796][ T4451] RIP: 0033:0x7f1f0c21fce4 [ 59.610754][ T4451] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 59.633738][ T4451] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 59.640174][ T4451] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 59.648491][ T4451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 59.656709][ T4451] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 59.665109][ T4451] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000e998 [ 59.673338][ T4451] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 000000000000e657 [ 59.681578][ T4451] [ 59.685103][ T4451] memory: usage 307200kB, limit 307200kB, failcnt 490 [ 59.691953][ T4451] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 59.699940][ T4451] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 59.707343][ T4451] Memory cgroup stats for /syz5: [ 59.707591][ T4451] cache 8192 [ 59.715826][ T4451] rss 16384 [ 59.718951][ T4451] shmem 0 [ 59.721884][ T4451] mapped_file 0 [ 59.725561][ T4451] dirty 0 [ 59.728651][ T4451] writeback 8192 [ 59.732239][ T4451] workingset_refault_anon 67 [ 59.737065][ T4451] workingset_refault_file 3 [ 59.741612][ T4451] swap 241664 [ 59.744958][ T4451] swapcached 16384 [ 59.748878][ T4451] pgpgin 2826 [ 59.752268][ T4451] pgpgout 2820 [ 59.755851][ T4451] pgfault 6408 [ 59.759309][ T4451] pgmajfault 22 [ 59.763349][ T4451] inactive_anon 0 [ 59.767148][ T4451] active_anon 0 [ 59.770621][ T4451] inactive_file 0 [ 59.774361][ T4451] active_file 8192 [ 59.778081][ T4451] unevictable 0 [ 59.781627][ T4451] hierarchical_memory_limit 314572800 [ 59.787187][ T4451] hierarchical_memsw_limit 9223372036854771712 [ 59.793490][ T4451] total_cache 8192 [ 59.797489][ T4451] total_rss 16384 [ 59.801198][ T4451] total_shmem 0 [ 59.804810][ T4451] total_mapped_file 0 [ 59.808964][ T4451] total_dirty 0 [ 59.812424][ T4451] total_writeback 8192 [ 59.816523][ T4451] total_workingset_refault_anon 67 [ 59.821722][ T4451] total_workingset_refault_file 3 [ 59.826893][ T4451] total_swap 241664 [ 59.830762][ T4451] total_swapcached 16384 [ 59.835122][ T4451] total_pgpgin 2826 [ 59.839047][ T4451] total_pgpgout 2820 [ 59.842933][ T4451] total_pgfault 6408 [ 59.847031][ T4451] total_pgmajfault 22 [ 59.851011][ T4451] total_inactive_anon 0 [ 59.855339][ T4451] total_active_anon 0 [ 59.859591][ T4451] total_inactive_file 0 [ 59.863972][ T4451] total_active_file 8192 [ 59.868247][ T4451] total_unevictable 0 [ 59.872327][ T4451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4451,uid=0 [ 59.887711][ T4451] Memory cgroup out of memory: Killed process 4451 (syz-executor.5) total-vm:51820kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:27 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) 09:25:27 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r1 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 60.010675][ T4463] syz-executor.5 (4463) used greatest stack depth: 9608 bytes left 09:25:27 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) 09:25:27 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:27 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) 09:25:27 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 09:25:27 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:27 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) [ 60.488323][ T4484] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 60.500365][ T4484] CPU: 0 PID: 4484 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 60.510794][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 60.521104][ T4484] Call Trace: [ 60.524422][ T4484] [ 60.527357][ T4484] dump_stack_lvl+0xda/0x130 [ 60.532088][ T4484] dump_stack+0x15/0x20 [ 60.536876][ T4484] dump_header+0x82/0x2d0 [ 60.541274][ T4484] oom_kill_process+0x33a/0x4c0 [ 60.546213][ T4484] out_of_memory+0x9ca/0xbf0 [ 60.551524][ T4484] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 60.557840][ T4484] mem_cgroup_out_of_memory+0x139/0x190 [ 60.566182][ T4484] try_charge_memcg+0x75c/0xd30 [ 60.571948][ T4484] ? __swap_duplicate+0x29b/0x2b0 [ 60.577916][ T4484] ? radix_tree_lookup+0xf9/0x150 [ 60.585877][ T4484] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 60.592455][ T4484] __read_swap_cache_async+0x2f6/0x550 [ 60.598269][ T4484] swap_cluster_readahead+0x27c/0x4c0 [ 60.603819][ T4484] swapin_readahead+0xe9/0x7f0 [ 60.609105][ T4484] ? __filemap_get_folio+0x41a/0x5a0 [ 60.614753][ T4484] ? swap_cache_get_folio+0x6e/0x200 [ 60.620266][ T4484] do_swap_page+0x4a0/0x1670 [ 60.625053][ T4484] ? cgroup_rstat_updated+0x8c/0x1c0 [ 60.630722][ T4484] ? __rcu_read_lock+0x35/0x50 [ 60.635925][ T4484] ? pte_offset_map_nolock+0x124/0x1d0 [ 60.641510][ T4484] handle_mm_fault+0xa36/0x2dd0 [ 60.646655][ T4484] exc_page_fault+0x3ff/0x6c0 [ 60.651568][ T4484] asm_exc_page_fault+0x26/0x30 [ 60.656786][ T4484] RIP: 0033:0x7f552c4aace4 [ 60.661285][ T4484] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 60.682017][ T4484] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 60.688229][ T4484] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 60.696597][ T4484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 60.704666][ T4484] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 60.712844][ T4484] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000ee37 [ 60.720936][ T4484] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000eaf6 [ 60.729013][ T4484] [ 60.733089][ T4484] memory: usage 307200kB, limit 307200kB, failcnt 10516 [ 60.742410][ T4484] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 60.752948][ T4484] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 60.760727][ T4484] Memory cgroup stats for /syz2: [ 60.761217][ T4484] cache 4096 [ 60.769545][ T4484] rss 12288 [ 60.772824][ T4484] shmem 0 [ 60.776147][ T4484] mapped_file 0 [ 60.779626][ T4484] dirty 0 [ 60.783084][ T4484] writeback 12288 [ 60.786808][ T4484] workingset_refault_anon 1056 [ 60.791977][ T4484] workingset_refault_file 0 [ 60.797175][ T4484] swap 249856 [ 60.800481][ T4484] swapcached 12288 [ 60.804734][ T4484] pgpgin 2157 [ 60.808018][ T4484] pgpgout 2153 [ 60.811468][ T4484] pgfault 5084 [ 60.814902][ T4484] pgmajfault 310 [ 60.818554][ T4484] inactive_anon 0 [ 60.822245][ T4484] active_anon 0 [ 60.825987][ T4484] inactive_file 4096 [ 60.830089][ T4484] active_file 0 [ 60.833709][ T4484] unevictable 0 09:25:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:28 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:28 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 60.837546][ T4484] hierarchical_memory_limit 314572800 [ 60.843075][ T4484] hierarchical_memsw_limit 9223372036854771712 [ 60.849565][ T4484] total_cache 4096 [ 60.853421][ T4484] total_rss 12288 [ 60.857523][ T4484] total_shmem 0 [ 60.861072][ T4484] total_mapped_file 0 [ 60.865101][ T4484] total_dirty 0 [ 60.868742][ T4484] total_writeback 12288 [ 60.873385][ T4484] total_workingset_refault_anon 1056 [ 60.878707][ T4484] total_workingset_refault_file 0 [ 60.883768][ T4484] total_swap 249856 [ 60.887758][ T4484] total_swapcached 12288 [ 60.892256][ T4484] total_pgpgin 2157 [ 60.896205][ T4484] total_pgpgout 2153 [ 60.900200][ T4484] total_pgfault 5084 [ 60.904217][ T4484] total_pgmajfault 310 [ 60.908636][ T4484] total_inactive_anon 0 [ 60.913053][ T4484] total_active_anon 0 [ 60.917270][ T4484] total_inactive_file 4096 [ 60.921857][ T4484] total_active_file 0 [ 60.926005][ T4484] total_unevictable 0 09:25:28 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) [ 60.930085][ T4484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4484,uid=0 [ 60.945586][ T4484] Memory cgroup out of memory: Killed process 4484 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8880kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:28 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x801, 0x140) 09:25:28 executing program 3: io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:28 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:28 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:28 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:28 executing program 3: io_uring_setup(0x0, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:28 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:28 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 61.468959][ T4519] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 61.480707][ T4519] CPU: 0 PID: 4519 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 61.491426][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 61.501569][ T4519] Call Trace: [ 61.504941][ T4519] [ 61.507904][ T4519] dump_stack_lvl+0xda/0x130 [ 61.512515][ T4519] dump_stack+0x15/0x20 [ 61.516690][ T4519] dump_header+0x82/0x2d0 [ 61.521211][ T4519] oom_kill_process+0x33a/0x4c0 [ 61.526232][ T4519] out_of_memory+0x9ca/0xbf0 [ 61.530903][ T4519] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 61.537165][ T4519] mem_cgroup_out_of_memory+0x139/0x190 [ 61.543268][ T4519] try_charge_memcg+0x75c/0xd30 [ 61.548131][ T4519] ? __swap_duplicate+0x29b/0x2b0 [ 61.553263][ T4519] ? radix_tree_lookup+0xf9/0x150 [ 61.558415][ T4519] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 61.565512][ T4519] __read_swap_cache_async+0x2f6/0x550 [ 61.570983][ T4519] swap_cluster_readahead+0x27c/0x4c0 [ 61.576370][ T4519] swapin_readahead+0xe9/0x7f0 [ 61.581249][ T4519] ? __filemap_get_folio+0x41a/0x5a0 [ 61.586651][ T4519] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 61.592484][ T4519] ? swap_cache_get_folio+0x6e/0x200 [ 61.598033][ T4519] do_swap_page+0x4a0/0x1670 [ 61.602635][ T4519] ? cgroup_rstat_updated+0x8c/0x1c0 [ 61.607956][ T4519] ? __rcu_read_lock+0x35/0x50 [ 61.612822][ T4519] ? pte_offset_map_nolock+0x124/0x1d0 [ 61.618366][ T4519] handle_mm_fault+0xa36/0x2dd0 [ 61.623648][ T4519] exc_page_fault+0x3ff/0x6c0 [ 61.628481][ T4519] asm_exc_page_fault+0x26/0x30 [ 61.633558][ T4519] RIP: 0033:0x7f1f0c21fcaf [ 61.638137][ T4519] Code: 49 39 c4 4c 0f 42 e0 48 8b 05 05 ea c8 00 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6c 16 00 00 0f 8e 12 ff ff ff 6c 06 ff ff 49 39 c4 0f 82 60 01 00 00 69 3d c9 e9 c8 00 e8 03 [ 61.658377][ T4519] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010202 [ 61.664525][ T4519] RAX: 0000000000000000 RBX: 00007f1f0c386980 RCX: 0000000000000000 [ 61.672722][ T4519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 61.680759][ T4519] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 61.688897][ T4519] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f209 [ 61.697476][ T4519] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 000000000000eec8 [ 61.705461][ T4519] [ 61.708558][ T4519] memory: usage 307200kB, limit 307200kB, failcnt 1440 09:25:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:29 executing program 3: io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:29 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:29 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 61.715578][ T4519] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 61.723752][ T4519] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 61.731036][ T4519] Memory cgroup stats for /syz5: [ 61.733258][ T4519] cache 4096 [ 61.741408][ T4519] rss 8192 [ 61.744696][ T4519] shmem 0 [ 61.747836][ T4519] mapped_file 0 [ 61.751371][ T4519] dirty 4096 [ 61.754610][ T4519] writeback 8192 [ 61.758218][ T4519] workingset_refault_anon 156 [ 61.763032][ T4519] workingset_refault_file 3 09:25:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:29 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 61.767806][ T4519] swap 180224 [ 61.771320][ T4519] swapcached 12288 [ 61.775120][ T4519] pgpgin 2969 [ 61.778592][ T4519] pgpgout 2965 [ 61.782064][ T4519] pgfault 6755 [ 61.785472][ T4519] pgmajfault 44 [ 61.789019][ T4519] inactive_anon 4096 [ 61.793060][ T4519] active_anon 0 [ 61.796543][ T4519] inactive_file 0 [ 61.800197][ T4519] active_file 4096 [ 61.807195][ T4519] unevictable 0 [ 61.810662][ T4519] hierarchical_memory_limit 314572800 [ 61.816870][ T4519] hierarchical_memsw_limit 9223372036854771712 [ 61.828345][ T4519] total_cache 4096 [ 61.832683][ T4519] total_rss 8192 [ 61.836375][ T4519] total_shmem 0 [ 61.839891][ T4519] total_mapped_file 0 [ 61.843979][ T4519] total_dirty 4096 [ 61.847881][ T4519] total_writeback 8192 [ 61.851959][ T4519] total_workingset_refault_anon 156 [ 61.857744][ T4519] total_workingset_refault_file 3 [ 61.862872][ T4519] total_swap 180224 [ 61.866743][ T4519] total_swapcached 12288 [ 61.871423][ T4519] total_pgpgin 2969 [ 61.875269][ T4519] total_pgpgout 2965 [ 61.879333][ T4519] total_pgfault 6755 [ 61.883252][ T4519] total_pgmajfault 44 [ 61.887219][ T4519] total_inactive_anon 4096 [ 61.891696][ T4519] total_active_anon 0 [ 61.895902][ T4519] total_inactive_file 0 [ 61.900074][ T4519] total_active_file 4096 [ 61.904812][ T4519] total_unevictable 0 [ 61.908931][ T4519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4519,uid=0 [ 61.925156][ T4519] Memory cgroup out of memory: Killed process 4519 (syz-executor.5) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:29 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r12, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:29 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:29 executing program 3: io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:29 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:29 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) r11 = pidfd_getfd(r2, r3, 0x0) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r11, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r11, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:29 executing program 3: io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:29 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:29 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) 09:25:29 executing program 3: io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:29 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 62.421678][ T4559] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 62.442233][ T4559] CPU: 0 PID: 4559 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 62.453095][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 62.463250][ T4559] Call Trace: [ 62.467834][ T4559] [ 62.470880][ T4559] dump_stack_lvl+0xda/0x130 [ 62.475573][ T4559] dump_stack+0x15/0x20 [ 62.479890][ T4559] dump_header+0x82/0x2d0 [ 62.484262][ T4559] oom_kill_process+0x33a/0x4c0 [ 62.489370][ T4559] out_of_memory+0x9ca/0xbf0 [ 62.494242][ T4559] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 62.500464][ T4559] mem_cgroup_out_of_memory+0x139/0x190 [ 62.506111][ T4559] try_charge_memcg+0x75c/0xd30 [ 62.511092][ T4559] ? __swap_duplicate+0x29b/0x2b0 [ 62.516265][ T4559] ? radix_tree_lookup+0xf9/0x150 [ 62.523624][ T4559] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 62.529807][ T4559] __read_swap_cache_async+0x2f6/0x550 [ 62.535338][ T4559] swap_cluster_readahead+0x27c/0x4c0 [ 62.540747][ T4559] swapin_readahead+0xe9/0x7f0 [ 62.545536][ T4559] ? __filemap_get_folio+0x41a/0x5a0 [ 62.550969][ T4559] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 62.556680][ T4559] ? swap_cache_get_folio+0x6e/0x200 [ 62.562599][ T4559] do_swap_page+0x4a0/0x1670 [ 62.567438][ T4559] ? cgroup_rstat_updated+0x8c/0x1c0 [ 62.572928][ T4559] ? __rcu_read_lock+0x35/0x50 [ 62.577774][ T4559] ? pte_offset_map_nolock+0x124/0x1d0 [ 62.583340][ T4559] handle_mm_fault+0xa36/0x2dd0 [ 62.588253][ T4559] exc_page_fault+0x3ff/0x6c0 [ 62.592975][ T4559] asm_exc_page_fault+0x26/0x30 [ 62.597904][ T4559] RIP: 0033:0x7f552c4aace4 [ 62.602305][ T4559] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 62.622949][ T4559] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 62.629646][ T4559] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 62.637644][ T4559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 62.645981][ T4559] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 62.654058][ T4559] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f5c2 [ 62.662358][ T4559] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000f281 [ 62.670492][ T4559] [ 62.674244][ T4559] memory: usage 307200kB, limit 307200kB, failcnt 11191 [ 62.681276][ T4559] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 62.689519][ T4559] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 62.696858][ T4559] Memory cgroup stats for /syz2: [ 62.697217][ T4559] cache 4096 [ 62.705747][ T4559] rss 12288 [ 62.708867][ T4559] shmem 0 [ 62.711825][ T4559] mapped_file 0 [ 62.715634][ T4559] dirty 0 [ 62.718774][ T4559] writeback 4096 [ 62.722379][ T4559] workingset_refault_anon 1141 [ 62.727367][ T4559] workingset_refault_file 0 [ 62.732064][ T4559] swap 180224 [ 62.735556][ T4559] swapcached 12288 [ 62.739393][ T4559] pgpgin 2300 [ 62.742780][ T4559] pgpgout 2296 [ 62.746357][ T4559] pgfault 5445 [ 62.749726][ T4559] pgmajfault 335 [ 62.753291][ T4559] inactive_anon 0 [ 62.757100][ T4559] active_anon 0 [ 62.760567][ T4559] inactive_file 4096 [ 62.764504][ T4559] active_file 0 [ 62.768009][ T4559] unevictable 0 [ 62.771642][ T4559] hierarchical_memory_limit 314572800 [ 62.777053][ T4559] hierarchical_memsw_limit 9223372036854771712 [ 62.783243][ T4559] total_cache 4096 [ 62.787131][ T4559] total_rss 12288 [ 62.790908][ T4559] total_shmem 0 [ 62.794386][ T4559] total_mapped_file 0 [ 62.798572][ T4559] total_dirty 0 [ 62.802386][ T4559] total_writeback 4096 [ 62.807290][ T4559] total_workingset_refault_anon 1141 [ 62.812762][ T4559] total_workingset_refault_file 0 [ 62.817894][ T4559] total_swap 180224 [ 62.821729][ T4559] total_swapcached 12288 [ 62.826834][ T4559] total_pgpgin 2300 [ 62.830732][ T4559] total_pgpgout 2296 [ 62.834695][ T4559] total_pgfault 5445 [ 62.838593][ T4559] total_pgmajfault 335 [ 62.842642][ T4559] total_inactive_anon 0 [ 62.846814][ T4559] total_active_anon 0 [ 62.850831][ T4559] total_inactive_file 4096 [ 62.855270][ T4559] total_active_file 0 [ 62.859371][ T4559] total_unevictable 0 09:25:30 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:30 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:30 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r12, 0x2, 0x3}, 0x48) 09:25:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:30 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 62.863436][ T4559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4559,uid=0 [ 62.879285][ T4559] Memory cgroup out of memory: Killed process 4559 (syz-executor.2) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:30 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) r11 = pidfd_getfd(r2, r3, 0x0) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r11, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r11, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:30 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:30 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:30 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:30 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 63.479898][ T4587] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 63.492084][ T4587] CPU: 0 PID: 4587 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 63.502593][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 63.512997][ T4587] Call Trace: [ 63.516416][ T4587] [ 63.519498][ T4587] dump_stack_lvl+0xda/0x130 [ 63.524193][ T4587] dump_stack+0x15/0x20 [ 63.528424][ T4587] dump_header+0x82/0x2d0 [ 63.532798][ T4587] oom_kill_process+0x33a/0x4c0 [ 63.537795][ T4587] out_of_memory+0x9ca/0xbf0 [ 63.542430][ T4587] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 63.548738][ T4587] mem_cgroup_out_of_memory+0x139/0x190 [ 63.554388][ T4587] try_charge_memcg+0x75c/0xd30 [ 63.559271][ T4587] ? __swap_duplicate+0x29b/0x2b0 [ 63.564702][ T4587] ? radix_tree_lookup+0xf9/0x150 [ 63.569965][ T4587] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 63.576163][ T4587] __read_swap_cache_async+0x2f6/0x550 [ 63.581899][ T4587] swap_cluster_readahead+0x27c/0x4c0 [ 63.587732][ T4587] swapin_readahead+0xe9/0x7f0 [ 63.592587][ T4587] ? __filemap_get_folio+0x41a/0x5a0 [ 63.598144][ T4587] ? swap_cache_get_folio+0x6e/0x200 [ 63.603531][ T4587] do_swap_page+0x4a0/0x1670 [ 63.608234][ T4587] ? cgroup_rstat_updated+0x8c/0x1c0 [ 63.613733][ T4587] ? __rcu_read_lock+0x35/0x50 [ 63.618505][ T4587] ? pte_offset_map_nolock+0x124/0x1d0 [ 63.624013][ T4587] handle_mm_fault+0xa36/0x2dd0 [ 63.629078][ T4587] exc_page_fault+0x3ff/0x6c0 [ 63.633847][ T4587] asm_exc_page_fault+0x26/0x30 [ 63.638708][ T4587] RIP: 0033:0x7f1f0c21fce4 [ 63.643274][ T4587] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 63.663417][ T4587] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 63.669549][ T4587] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 63.677794][ T4587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 63.685860][ T4587] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 63.693851][ T4587] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f922 [ 63.701855][ T4587] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 000000000000f5e1 [ 63.709857][ T4587] [ 63.713328][ T4587] memory: usage 307200kB, limit 307200kB, failcnt 2023 [ 63.720303][ T4587] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 63.728254][ T4587] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 63.735562][ T4587] Memory cgroup stats for /syz5: [ 63.742363][ T4587] cache 4096 [ 63.750633][ T4587] rss 8192 [ 63.753779][ T4587] shmem 0 [ 63.756789][ T4587] mapped_file 0 [ 63.760755][ T4587] dirty 4096 [ 63.764091][ T4587] writeback 8192 [ 63.767811][ T4587] workingset_refault_anon 227 [ 63.772523][ T4587] workingset_refault_file 3 [ 63.777180][ T4587] swap 172032 [ 63.780532][ T4587] swapcached 20480 [ 63.784381][ T4587] pgpgin 3095 [ 63.788060][ T4587] pgpgout 3089 [ 63.791544][ T4587] pgfault 7026 [ 63.795135][ T4587] pgmajfault 66 [ 63.798600][ T4587] inactive_anon 4096 [ 63.802578][ T4587] active_anon 0 [ 63.806144][ T4587] inactive_file 0 [ 63.809889][ T4587] active_file 4096 [ 63.813770][ T4587] unevictable 0 [ 63.817489][ T4587] hierarchical_memory_limit 314572800 [ 63.822938][ T4587] hierarchical_memsw_limit 9223372036854771712 [ 63.829399][ T4587] total_cache 4096 [ 63.833453][ T4587] total_rss 8192 [ 63.837421][ T4587] total_shmem 0 [ 63.840871][ T4587] total_mapped_file 0 [ 63.845010][ T4587] total_dirty 4096 [ 63.848718][ T4587] total_writeback 8192 [ 63.852829][ T4587] total_workingset_refault_anon 227 [ 63.858059][ T4587] total_workingset_refault_file 3 [ 63.863303][ T4587] total_swap 172032 [ 63.867180][ T4587] total_swapcached 20480 [ 63.871488][ T4587] total_pgpgin 3095 [ 63.875325][ T4587] total_pgpgout 3089 [ 63.879298][ T4587] total_pgfault 7026 [ 63.883306][ T4587] total_pgmajfault 66 [ 63.887288][ T4587] total_inactive_anon 4096 [ 63.891693][ T4587] total_active_anon 0 [ 63.895777][ T4587] total_inactive_file 0 [ 63.899977][ T4587] total_active_file 4096 [ 63.904303][ T4587] total_unevictable 0 [ 63.908318][ T4587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4587,uid=0 09:25:31 executing program 0: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 63.923657][ T4587] Memory cgroup out of memory: Killed process 4587 (syz-executor.5) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:31 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:31 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:31 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) r11 = pidfd_getfd(r2, r3, 0x0) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r11, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, r11, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:31 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:31 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r12, 0x2, 0x3}, 0x48) 09:25:31 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:31 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:31 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:31 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:31 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) [ 64.553192][ T4616] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 64.564930][ T4616] CPU: 0 PID: 4616 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 64.575661][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 64.586015][ T4616] Call Trace: [ 64.589298][ T4616] [ 64.592232][ T4616] dump_stack_lvl+0xda/0x130 [ 64.596988][ T4616] dump_stack+0x15/0x20 [ 64.601225][ T4616] dump_header+0x82/0x2d0 [ 64.605756][ T4616] oom_kill_process+0x33a/0x4c0 [ 64.611206][ T4616] out_of_memory+0x9ca/0xbf0 [ 64.616342][ T4616] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 64.622437][ T4616] mem_cgroup_out_of_memory+0x139/0x190 [ 64.628095][ T4616] try_charge_memcg+0x75c/0xd30 [ 64.633113][ T4616] ? __swap_duplicate+0x29b/0x2b0 [ 64.638163][ T4616] ? radix_tree_lookup+0xf9/0x150 [ 64.643393][ T4616] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 64.649781][ T4616] __read_swap_cache_async+0x2f6/0x550 [ 64.655391][ T4616] swap_cluster_readahead+0x27c/0x4c0 [ 64.660914][ T4616] swapin_readahead+0xe9/0x7f0 [ 64.665769][ T4616] ? __filemap_get_folio+0x41a/0x5a0 [ 64.671205][ T4616] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 64.676937][ T4616] ? swap_cache_get_folio+0x6e/0x200 [ 64.682338][ T4616] do_swap_page+0x4a0/0x1670 [ 64.687327][ T4616] ? cgroup_rstat_updated+0x8c/0x1c0 [ 64.692816][ T4616] ? __rcu_read_lock+0x35/0x50 [ 64.697644][ T4616] ? pte_offset_map_nolock+0x124/0x1d0 [ 64.703278][ T4616] handle_mm_fault+0xa36/0x2dd0 [ 64.708416][ T4616] exc_page_fault+0x3ff/0x6c0 [ 64.713315][ T4616] asm_exc_page_fault+0x26/0x30 [ 64.718403][ T4616] RIP: 0033:0x7f552c4aace4 [ 64.722839][ T4616] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 64.742651][ T4616] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 64.748951][ T4616] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 64.757086][ T4616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 64.766026][ T4616] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 64.774096][ T4616] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000fda8 [ 64.782170][ T4616] R13: ffffffffffffffff R14: 00007f552c074000 R15: 000000000000fa67 [ 64.790708][ T4616] [ 64.793823][ T4616] memory: usage 307200kB, limit 307200kB, failcnt 11504 [ 64.801004][ T4616] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 64.809079][ T4616] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 64.816396][ T4616] Memory cgroup stats for /syz2: [ 64.824293][ T4616] cache 4096 [ 64.832658][ T4616] rss 12288 [ 64.835860][ T4616] shmem 0 [ 64.838791][ T4616] mapped_file 0 [ 64.842328][ T4616] dirty 0 [ 64.845361][ T4616] writeback 12288 [ 64.849119][ T4616] workingset_refault_anon 1212 09:25:32 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 09:25:32 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 64.853967][ T4616] workingset_refault_file 0 [ 64.858485][ T4616] swap 262144 [ 64.861769][ T4616] swapcached 24576 [ 64.865509][ T4616] pgpgin 2429 [ 64.868897][ T4616] pgpgout 2422 [ 64.872336][ T4616] pgfault 5767 [ 64.875745][ T4616] pgmajfault 360 [ 64.879343][ T4616] inactive_anon 4096 [ 64.883273][ T4616] active_anon 0 [ 64.886794][ T4616] inactive_file 4096 [ 64.890842][ T4616] active_file 0 [ 64.894345][ T4616] unevictable 0 [ 64.897981][ T4616] hierarchical_memory_limit 314572800 [ 64.903409][ T4616] hierarchical_memsw_limit 9223372036854771712 [ 64.909602][ T4616] total_cache 4096 [ 64.913397][ T4616] total_rss 12288 [ 64.917037][ T4616] total_shmem 0 [ 64.920507][ T4616] total_mapped_file 0 [ 64.924633][ T4616] total_dirty 0 [ 64.928102][ T4616] total_writeback 12288 [ 64.932273][ T4616] total_workingset_refault_anon 1212 [ 64.937582][ T4616] total_workingset_refault_file 0 [ 64.942696][ T4616] total_swap 262144 [ 64.946564][ T4616] total_swapcached 24576 [ 64.950827][ T4616] total_pgpgin 2429 [ 64.954767][ T4616] total_pgpgout 2422 [ 64.958981][ T4616] total_pgfault 5767 [ 64.962871][ T4616] total_pgmajfault 360 [ 64.967171][ T4616] total_inactive_anon 4096 [ 64.971667][ T4616] total_active_anon 0 [ 64.975703][ T4616] total_inactive_file 4096 [ 64.980132][ T4616] total_active_file 0 [ 64.984149][ T4616] total_unevictable 0 [ 64.988131][ T4616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4616,uid=0 09:25:32 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r17, 0x25, r14, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 65.003548][ T4616] Memory cgroup out of memory: Killed process 4616 (syz-executor.2) total-vm:49640kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:32 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r8 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = pidfd_getfd(r2, r3, 0x0) r11 = pidfd_getfd(r4, r3, 0x0) r12 = fsmount(r2, 0x0, 0x8) r13 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r10, r1, r11, r2, r12, r13], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r14 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r10, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r14, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r16, 0x25, r13, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:32 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r12, 0x2, 0x3}, 0x48) 09:25:32 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 09:25:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:32 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:32 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:32 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.log\x00', 0x0, 0x0) 09:25:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:32 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(0x0, 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:32 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000680)=""/142, 0x0}, 0x58) [ 65.589909][ T4651] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 65.601430][ T4651] CPU: 0 PID: 4651 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 65.612041][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 65.622207][ T4651] Call Trace: [ 65.625740][ T4651] [ 65.628959][ T4651] dump_stack_lvl+0xda/0x130 [ 65.633866][ T4651] dump_stack+0x15/0x20 [ 65.638109][ T4651] dump_header+0x82/0x2d0 [ 65.642588][ T4651] oom_kill_process+0x33a/0x4c0 [ 65.647693][ T4651] out_of_memory+0x9ca/0xbf0 [ 65.652289][ T4651] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 65.658508][ T4651] mem_cgroup_out_of_memory+0x139/0x190 [ 65.664066][ T4651] try_charge_memcg+0x75c/0xd30 [ 65.668940][ T4651] ? __swap_duplicate+0x29b/0x2b0 [ 65.673987][ T4651] ? radix_tree_lookup+0xf9/0x150 [ 65.679900][ T4651] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 65.686004][ T4651] __read_swap_cache_async+0x2f6/0x550 [ 65.691705][ T4651] swap_cluster_readahead+0x27c/0x4c0 [ 65.697103][ T4651] swapin_readahead+0xe9/0x7f0 [ 65.701922][ T4651] ? __filemap_get_folio+0x41a/0x5a0 [ 65.707476][ T4651] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 65.713216][ T4651] ? swap_cache_get_folio+0x6e/0x200 [ 65.718528][ T4651] do_swap_page+0x4a0/0x1670 [ 65.723172][ T4651] ? cgroup_rstat_updated+0x8c/0x1c0 [ 65.728560][ T4651] ? __rcu_read_lock+0x35/0x50 [ 65.733439][ T4651] ? pte_offset_map_nolock+0x124/0x1d0 [ 65.738918][ T4651] handle_mm_fault+0xa36/0x2dd0 [ 65.743867][ T4651] exc_page_fault+0x3ff/0x6c0 [ 65.749128][ T4651] asm_exc_page_fault+0x26/0x30 [ 65.754119][ T4651] RIP: 0033:0x7f3338c34ce4 [ 65.758540][ T4651] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 65.778326][ T4651] RSP: 002b:00007ffc9aa5c3c0 EFLAGS: 00010206 [ 65.784405][ T4651] RAX: 0000000000000000 RBX: 00007f3338d99f80 RCX: 0000000000000000 [ 65.792497][ T4651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557513788 [ 65.800492][ T4651] RBP: 00007f3338d9b980 R08: 0000000000000000 R09: 00007ffc9abf80b0 [ 65.808581][ T4651] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001015c [ 65.816724][ T4651] R13: ffffffffffffffff R14: 00007f33387fe000 R15: 000000000000fe1b [ 65.824766][ T4651] [ 65.828003][ T4651] memory: usage 307200kB, limit 307200kB, failcnt 431 [ 65.834889][ T4651] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 65.842798][ T4651] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 65.850132][ T4651] Memory cgroup stats for /syz3: [ 65.851910][ T4651] cache 12288 [ 65.860166][ T4651] rss 8192 [ 65.863294][ T4651] shmem 0 [ 65.866227][ T4651] mapped_file 0 [ 65.869717][ T4651] dirty 12288 [ 65.873135][ T4651] writeback 8192 [ 65.876941][ T4651] workingset_refault_anon 93 [ 65.881510][ T4651] workingset_refault_file 5 [ 65.886126][ T4651] swap 188416 [ 65.889411][ T4651] swapcached 8192 [ 65.893308][ T4651] pgpgin 4239 [ 65.896912][ T4651] pgpgout 4234 [ 65.900277][ T4651] pgfault 9009 [ 65.903984][ T4651] pgmajfault 35 [ 65.907443][ T4651] inactive_anon 0 [ 65.911219][ T4651] active_anon 0 [ 65.914918][ T4651] inactive_file 12288 [ 65.918897][ T4651] active_file 0 [ 65.922461][ T4651] unevictable 0 [ 65.925932][ T4651] hierarchical_memory_limit 314572800 [ 65.931421][ T4651] hierarchical_memsw_limit 9223372036854771712 [ 65.937591][ T4651] total_cache 12288 [ 65.941498][ T4651] total_rss 8192 [ 65.945090][ T4651] total_shmem 0 [ 65.948673][ T4651] total_mapped_file 0 [ 65.952633][ T4651] total_dirty 12288 [ 65.956754][ T4651] total_writeback 8192 [ 65.960836][ T4651] total_workingset_refault_anon 93 [ 65.966301][ T4651] total_workingset_refault_file 5 [ 65.971679][ T4651] total_swap 188416 [ 65.975803][ T4651] total_swapcached 8192 [ 65.980412][ T4651] total_pgpgin 4239 [ 65.984413][ T4651] total_pgpgout 4234 [ 65.989039][ T4651] total_pgfault 9009 [ 65.993822][ T4651] total_pgmajfault 35 [ 65.999018][ T4651] total_inactive_anon 0 [ 66.003293][ T4651] total_active_anon 0 [ 66.007468][ T4651] total_inactive_file 12288 [ 66.012478][ T4651] total_active_file 0 [ 66.016508][ T4651] total_unevictable 0 [ 66.020596][ T4651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4651,uid=0 [ 66.035908][ T4651] Memory cgroup out of memory: Killed process 4651 (syz-executor.3) total-vm:51688kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 09:25:33 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) 09:25:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:33 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:33 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) 09:25:33 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:33 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:33 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) fsmount(0xffffffffffffffff, 0x0, 0x7d) 09:25:33 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) 09:25:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:33 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x7d) 09:25:33 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) [ 66.662362][ T4692] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 66.674296][ T4692] CPU: 0 PID: 4692 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 66.685168][ T4692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 66.695304][ T4692] Call Trace: [ 66.698681][ T4692] [ 66.701707][ T4692] dump_stack_lvl+0xda/0x130 [ 66.706504][ T4692] dump_stack+0x15/0x20 [ 66.710818][ T4692] dump_header+0x82/0x2d0 [ 66.715875][ T4692] oom_kill_process+0x33a/0x4c0 [ 66.720952][ T4692] out_of_memory+0x9ca/0xbf0 [ 66.725646][ T4692] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 66.732131][ T4692] mem_cgroup_out_of_memory+0x139/0x190 [ 66.737825][ T4692] try_charge_memcg+0x75c/0xd30 [ 66.742742][ T4692] ? __swap_duplicate+0x29b/0x2b0 [ 66.747851][ T4692] ? radix_tree_lookup+0xf9/0x150 [ 66.752970][ T4692] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 66.759334][ T4692] __read_swap_cache_async+0x2f6/0x550 [ 66.764891][ T4692] swap_cluster_readahead+0x27c/0x4c0 [ 66.770341][ T4692] swapin_readahead+0xe9/0x7f0 [ 66.775231][ T4692] ? __filemap_get_folio+0x41a/0x5a0 [ 66.780615][ T4692] ? swap_cache_get_folio+0x6e/0x200 [ 66.786114][ T4692] do_swap_page+0x4a0/0x1670 [ 66.791022][ T4692] ? __rcu_read_lock+0x35/0x50 [ 66.796099][ T4692] ? pte_offset_map_nolock+0x124/0x1d0 [ 66.801859][ T4692] handle_mm_fault+0xa36/0x2dd0 [ 66.806842][ T4692] exc_page_fault+0x3ff/0x6c0 [ 66.811557][ T4692] asm_exc_page_fault+0x26/0x30 [ 66.816537][ T4692] RIP: 0033:0x7f3338c34ce4 [ 66.821073][ T4692] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 66.841564][ T4692] RSP: 002b:00007ffc9aa5c3c0 EFLAGS: 00010206 [ 66.848326][ T4692] RAX: 0000000000000000 RBX: 00007f3338d99f80 RCX: 0000000000000000 [ 66.856412][ T4692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557513788 [ 66.864771][ T4692] RBP: 00007f3338d9b980 R08: 0000000000000000 R09: 00007ffc9abf80b0 [ 66.872882][ T4692] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000105fc [ 66.881095][ T4692] R13: ffffffffffffffff R14: 00007f33387fe000 R15: 00000000000102bb [ 66.889279][ T4692] [ 66.892742][ T4692] memory: usage 307200kB, limit 307200kB, failcnt 931 [ 66.899947][ T4692] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 66.907915][ T4692] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 66.915323][ T4692] Memory cgroup stats for /syz3: [ 66.923049][ T4692] cache 12288 [ 66.931908][ T4692] rss 8192 [ 66.935378][ T4692] shmem 0 [ 66.938502][ T4692] mapped_file 0 [ 66.942230][ T4692] dirty 12288 [ 66.945740][ T4692] writeback 4096 [ 66.949379][ T4692] workingset_refault_anon 123 [ 66.954133][ T4692] workingset_refault_file 5 [ 66.959100][ T4692] swap 180224 [ 66.962390][ T4692] swapcached 65536 [ 66.966277][ T4692] pgpgin 4296 [ 66.970264][ T4692] pgpgout 4277 [ 66.973746][ T4692] pgfault 9153 [ 66.977212][ T4692] pgmajfault 46 [ 66.980679][ T4692] inactive_anon 4096 [ 66.984711][ T4692] active_anon 0 [ 66.988513][ T4692] inactive_file 0 [ 66.992225][ T4692] active_file 12288 [ 66.996911][ T4692] unevictable 0 [ 67.000849][ T4692] hierarchical_memory_limit 314572800 [ 67.006370][ T4692] hierarchical_memsw_limit 9223372036854771712 [ 67.012570][ T4692] total_cache 12288 [ 67.016454][ T4692] total_rss 8192 [ 67.020003][ T4692] total_shmem 0 [ 67.023812][ T4692] total_mapped_file 0 [ 67.027812][ T4692] total_dirty 12288 [ 67.031620][ T4692] total_writeback 4096 [ 67.035754][ T4692] total_workingset_refault_anon 123 [ 67.041013][ T4692] total_workingset_refault_file 5 [ 67.046083][ T4692] total_swap 180224 [ 67.049986][ T4692] total_swapcached 65536 [ 67.054269][ T4692] total_pgpgin 4296 [ 67.058248][ T4692] total_pgpgout 4277 [ 67.062210][ T4692] total_pgfault 9153 [ 67.066530][ T4692] total_pgmajfault 46 [ 67.070715][ T4692] total_inactive_anon 4096 [ 67.075920][ T4692] total_active_anon 0 [ 67.080421][ T4692] total_inactive_file 0 [ 67.084617][ T4692] total_active_file 12288 [ 67.089326][ T4692] total_unevictable 0 [ 67.093384][ T4692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4692,uid=0 [ 67.108716][ T4692] Memory cgroup out of memory: Killed process 4692 (syz-executor.3) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 09:25:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:34 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) 09:25:34 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) 09:25:34 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:34 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r16, 0xfffffffd, '\x00', r17, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r15, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) 09:25:34 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:34 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) 09:25:34 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) 09:25:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:34 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x0) 09:25:34 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(0x0, 0x0) 09:25:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:34 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 67.825499][ T4710] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 67.840688][ T4710] CPU: 0 PID: 4710 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 67.851256][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 67.861846][ T4710] Call Trace: [ 67.865140][ T4710] [ 67.868244][ T4710] dump_stack_lvl+0xda/0x130 [ 67.872965][ T4710] dump_stack+0x15/0x20 [ 67.877370][ T4710] dump_header+0x82/0x2d0 [ 67.881910][ T4710] oom_kill_process+0x33a/0x4c0 [ 67.887751][ T4710] out_of_memory+0x9ca/0xbf0 [ 67.892856][ T4710] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 67.899387][ T4710] mem_cgroup_out_of_memory+0x139/0x190 [ 67.905159][ T4710] try_charge_memcg+0x75c/0xd30 [ 67.910237][ T4710] ? __swap_duplicate+0x29b/0x2b0 [ 67.916370][ T4710] ? radix_tree_lookup+0xf9/0x150 [ 67.921576][ T4710] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 67.927681][ T4710] __read_swap_cache_async+0x2f6/0x550 [ 67.933406][ T4710] swap_cluster_readahead+0x27c/0x4c0 [ 67.939011][ T4710] swapin_readahead+0xe9/0x7f0 [ 67.943900][ T4710] ? __filemap_get_folio+0x41a/0x5a0 [ 67.949471][ T4710] ? swap_cache_get_folio+0x6e/0x200 [ 67.954869][ T4710] do_swap_page+0x4a0/0x1670 [ 67.959768][ T4710] ? asm_exc_page_fault+0x26/0x30 [ 67.964986][ T4710] ? __rcu_read_lock+0x35/0x50 [ 67.970924][ T4710] ? pte_offset_map_nolock+0x124/0x1d0 [ 67.976538][ T4710] handle_mm_fault+0xa36/0x2dd0 [ 67.981792][ T4710] exc_page_fault+0x3ff/0x6c0 [ 67.987019][ T4710] asm_exc_page_fault+0x26/0x30 [ 67.992782][ T4710] RIP: 0033:0x7f552c4aace4 [ 67.997717][ T4710] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 68.018621][ T4710] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010283 [ 68.025301][ T4710] RAX: 0000000000000000 RBX: 00007f552c610050 RCX: 0000000000000000 [ 68.033403][ T4710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 68.041523][ T4710] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 68.049657][ T4710] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000109e3 [ 68.057713][ T4710] R13: ffffffffffffffff R14: 00007f552c074000 R15: 00000000000106a2 [ 68.065810][ T4710] [ 68.069107][ T4710] memory: usage 307200kB, limit 307200kB, failcnt 12007 [ 68.076272][ T4710] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 68.084339][ T4710] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 68.091637][ T4710] Memory cgroup stats for /syz2: [ 68.092171][ T4710] cache 8192 [ 68.100527][ T4710] rss 12288 [ 68.103808][ T4710] shmem 0 [ 68.106761][ T4710] mapped_file 0 [ 68.110233][ T4710] dirty 4096 [ 68.113481][ T4710] writeback 20480 [ 68.117105][ T4710] workingset_refault_anon 1316 [ 68.121936][ T4710] workingset_refault_file 2 [ 68.126503][ T4710] swap 163840 [ 68.129854][ T4710] swapcached 28672 [ 68.133795][ T4710] pgpgin 2622 [ 68.137092][ T4710] pgpgout 2613 [ 68.140566][ T4710] pgfault 6195 [ 68.143999][ T4710] pgmajfault 408 [ 68.147573][ T4710] inactive_anon 0 [ 68.151248][ T4710] active_anon 0 [ 68.154909][ T4710] inactive_file 4096 [ 68.159324][ T4710] active_file 4096 [ 68.163065][ T4710] unevictable 0 [ 68.166610][ T4710] hierarchical_memory_limit 314572800 [ 68.171972][ T4710] hierarchical_memsw_limit 9223372036854771712 [ 68.178155][ T4710] total_cache 8192 [ 68.181976][ T4710] total_rss 12288 [ 68.185659][ T4710] total_shmem 0 [ 68.189116][ T4710] total_mapped_file 0 [ 68.193240][ T4710] total_dirty 4096 [ 68.196954][ T4710] total_writeback 20480 [ 68.201133][ T4710] total_workingset_refault_anon 1316 [ 68.206453][ T4710] total_workingset_refault_file 2 [ 68.211798][ T4710] total_swap 163840 [ 68.215693][ T4710] total_swapcached 28672 [ 68.219928][ T4710] total_pgpgin 2622 [ 68.223859][ T4710] total_pgpgout 2613 [ 68.227762][ T4710] total_pgfault 6195 [ 68.231641][ T4710] total_pgmajfault 408 [ 68.235842][ T4710] total_inactive_anon 0 [ 68.239990][ T4710] total_active_anon 0 [ 68.244001][ T4710] total_inactive_file 4096 [ 68.248414][ T4710] total_active_file 4096 [ 68.252649][ T4710] total_unevictable 0 [ 68.256641][ T4710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4710,uid=0 [ 68.271886][ T4710] Memory cgroup out of memory: Killed process 4710 (syz-executor.2) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 09:25:35 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:35 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, 0xffffffffffffffff, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) syz_io_uring_complete(0x0) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:35 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 09:25:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 68.861515][ T4746] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 68.873220][ T4746] CPU: 0 PID: 4746 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 68.883576][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 68.893835][ T4746] Call Trace: [ 68.897267][ T4746] [ 68.900382][ T4746] dump_stack_lvl+0xda/0x130 [ 68.905081][ T4746] dump_stack+0x15/0x20 [ 68.909260][ T4746] dump_header+0x82/0x2d0 [ 68.913704][ T4746] oom_kill_process+0x33a/0x4c0 [ 68.918627][ T4746] out_of_memory+0x9ca/0xbf0 [ 68.923262][ T4746] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 68.929417][ T4746] mem_cgroup_out_of_memory+0x139/0x190 [ 68.935150][ T4746] try_charge_memcg+0x75c/0xd30 [ 68.940502][ T4746] ? __swap_duplicate+0x29b/0x2b0 [ 68.945840][ T4746] ? radix_tree_lookup+0xf9/0x150 [ 68.951148][ T4746] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 68.957362][ T4746] __read_swap_cache_async+0x2f6/0x550 [ 68.962890][ T4746] swap_cluster_readahead+0x27c/0x4c0 [ 68.968321][ T4746] swapin_readahead+0xe9/0x7f0 [ 68.973196][ T4746] ? __filemap_get_folio+0x41a/0x5a0 [ 68.978583][ T4746] ? swap_cache_get_folio+0x6e/0x200 [ 68.983877][ T4746] do_swap_page+0x4a0/0x1670 [ 68.988642][ T4746] ? __rcu_read_lock+0x35/0x50 [ 68.993566][ T4746] ? pte_offset_map_nolock+0x124/0x1d0 [ 68.999120][ T4746] handle_mm_fault+0xa36/0x2dd0 [ 69.004006][ T4746] ? mt_find+0x1d9/0x310 [ 69.008360][ T4746] exc_page_fault+0x2f7/0x6c0 [ 69.013229][ T4746] asm_exc_page_fault+0x26/0x30 [ 69.018185][ T4746] RIP: 0010:__get_user_8+0x11/0x20 [ 69.023634][ T4746] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 69.043272][ T4746] RSP: 0018:ffffc90001047e38 EFLAGS: 00050202 [ 69.049351][ T4746] RAX: 0000555556807da8 RBX: ffffc90001047e40 RCX: ffffffff81443ea3 [ 69.057485][ T4746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812e85ba90 [ 69.065545][ T4746] RBP: ffffc90001047ef8 R08: 000188812e85ba97 R09: 0000000000000000 [ 69.073550][ T4746] R10: 0001ffffffffffff R11: 000188812e85b750 R12: ffff88812e85b0c0 [ 69.081668][ T4746] R13: ffff88812e85ba90 R14: ffffc90001047f58 R15: ffffc90001047fd8 [ 69.090456][ T4746] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 69.096384][ T4746] __rseq_handle_notify_resume+0xc7/0xbf0 [ 69.102372][ T4746] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 69.108378][ T4746] exit_to_user_mode_loop+0xcc/0xe0 [ 69.113663][ T4746] exit_to_user_mode_prepare+0x6c/0xb0 [ 69.119950][ T4746] irqentry_exit_to_user_mode+0x9/0x20 [ 69.125435][ T4746] irqentry_exit+0x12/0x40 [ 69.129937][ T4746] asm_exc_page_fault+0x26/0x30 [ 69.134838][ T4746] RIP: 0033:0x7f1f0c21fcbd [ 69.139264][ T4746] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6c 16 00 00 0f 8e 12 ff ff ff e8 6c 06 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 [ 69.159667][ T4746] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 69.165819][ T4746] RAX: 0000000000010ce1 RBX: 00007f1f0c386980 RCX: 00000000000109a0 [ 69.173793][ T4746] RDX: 0000000000000341 RSI: 00007ffc4034eea0 RDI: 7fffffffffffffff [ 69.181929][ T4746] RBP: 00007f1f0c386980 R08: 0000000000000010 R09: 00007ffc403d00b0 [ 69.190117][ T4746] R10: 00007ffc403d0080 R11: 0000000000002e36 R12: 0000000000010e59 [ 69.198085][ T4746] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000010b18 [ 69.206064][ T4746] [ 69.209252][ T4746] memory: usage 307200kB, limit 307200kB, failcnt 2767 [ 69.216231][ T4746] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 69.224237][ T4746] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 69.232111][ T4746] Memory cgroup stats for /syz5: [ 69.232583][ T4746] cache 4096 [ 69.241126][ T4746] rss 8192 [ 69.244462][ T4746] shmem 0 [ 69.247751][ T4746] mapped_file 0 [ 69.251270][ T4746] dirty 4096 [ 69.256036][ T4746] writeback 8192 [ 69.259663][ T4746] workingset_refault_anon 426 [ 69.264381][ T4746] workingset_refault_file 3 [ 69.269064][ T4746] swap 184320 [ 69.272345][ T4746] swapcached 8192 [ 69.276015][ T4746] pgpgin 3429 [ 69.279299][ T4746] pgpgout 3426 [ 69.282687][ T4746] pgfault 7812 [ 69.286064][ T4746] pgmajfault 129 [ 69.289677][ T4746] inactive_anon 0 [ 69.293317][ T4746] active_anon 0 [ 69.296942][ T4746] inactive_file 4096 [ 69.300847][ T4746] active_file 0 [ 69.304392][ T4746] unevictable 0 [ 69.307896][ T4746] hierarchical_memory_limit 314572800 [ 69.313308][ T4746] hierarchical_memsw_limit 9223372036854771712 [ 69.319455][ T4746] total_cache 4096 [ 69.323278][ T4746] total_rss 8192 [ 69.326945][ T4746] total_shmem 0 [ 69.330395][ T4746] total_mapped_file 0 [ 69.334527][ T4746] total_dirty 4096 [ 69.338234][ T4746] total_writeback 8192 [ 69.342306][ T4746] total_workingset_refault_anon 426 [ 69.348063][ T4746] total_workingset_refault_file 3 [ 69.353107][ T4746] total_swap 184320 [ 69.356955][ T4746] total_swapcached 8192 [ 69.361083][ T4746] total_pgpgin 3429 [ 69.365091][ T4746] total_pgpgout 3426 [ 69.368984][ T4746] total_pgfault 7812 [ 69.373157][ T4746] total_pgmajfault 129 [ 69.377223][ T4746] total_inactive_anon 0 [ 69.381907][ T4746] total_active_anon 0 [ 69.385899][ T4746] total_inactive_file 4096 [ 69.391342][ T4746] total_active_file 0 [ 69.395429][ T4746] total_unevictable 0 [ 69.399419][ T4746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4746,uid=0 [ 69.414863][ T4746] Memory cgroup out of memory: Killed process 4746 (syz-executor.5) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:36 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)) r7 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080), 0x0, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:36 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 09:25:36 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:36 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 09:25:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:37 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 09:25:37 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:37 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:37 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)) r7 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 70.125361][ T4782] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 70.136832][ T4782] CPU: 1 PID: 4782 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 70.147319][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 70.157598][ T4782] Call Trace: [ 70.161672][ T4782] [ 70.164706][ T4782] dump_stack_lvl+0xda/0x130 [ 70.169316][ T4782] dump_stack+0x15/0x20 [ 70.173565][ T4782] dump_header+0x82/0x2d0 [ 70.177995][ T4782] oom_kill_process+0x33a/0x4c0 [ 70.182896][ T4782] out_of_memory+0x9ca/0xbf0 [ 70.187593][ T4782] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 70.193812][ T4782] mem_cgroup_out_of_memory+0x139/0x190 [ 70.199567][ T4782] try_charge_memcg+0x75c/0xd30 [ 70.204657][ T4782] ? __swap_duplicate+0x29b/0x2b0 [ 70.209746][ T4782] ? radix_tree_lookup+0xf9/0x150 [ 70.214827][ T4782] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 70.221369][ T4782] __read_swap_cache_async+0x2f6/0x550 [ 70.227102][ T4782] swap_cluster_readahead+0x27c/0x4c0 [ 70.232563][ T4782] swapin_readahead+0xe9/0x7f0 [ 70.237494][ T4782] ? __filemap_get_folio+0x41a/0x5a0 [ 70.242781][ T4782] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 70.248752][ T4782] ? swap_cache_get_folio+0x6e/0x200 [ 70.254055][ T4782] do_swap_page+0x4a0/0x1670 [ 70.258731][ T4782] ? cgroup_rstat_updated+0x8c/0x1c0 [ 70.264205][ T4782] ? __rcu_read_lock+0x35/0x50 [ 70.269002][ T4782] ? pte_offset_map_nolock+0x124/0x1d0 [ 70.274635][ T4782] handle_mm_fault+0xa36/0x2dd0 [ 70.279547][ T4782] exc_page_fault+0x3ff/0x6c0 [ 70.284629][ T4782] asm_exc_page_fault+0x26/0x30 [ 70.289496][ T4782] RIP: 0033:0x7f3338ca60a3 [ 70.294029][ T4782] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 5e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 70.313706][ T4782] RSP: 002b:00007ffc9aa5c378 EFLAGS: 00010293 [ 70.319854][ T4782] RAX: 00000000fffffffa RBX: 00007f3338d99f80 RCX: 0000000000000000 [ 70.327837][ T4782] RDX: 00007ffc9aa5c390 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.335904][ T4782] RBP: 00007f3338d9b980 R08: 0000000000000010 R09: 00007ffc9abf80b0 [ 70.344082][ T4782] R10: 0000000000000000 R11: 0000000000002ef6 R12: 000000000001133d [ 70.352231][ T4782] R13: ffffffffffffffff R14: 00007f33387fe000 R15: 0000000000010ffc [ 70.360390][ T4782] [ 70.363664][ T4782] memory: usage 307200kB, limit 307200kB, failcnt 1483 [ 70.370905][ T4782] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 70.379075][ T4782] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 70.387004][ T4782] Memory cgroup stats for /syz3: [ 70.388166][ T4782] cache 12288 [ 70.397077][ T4782] rss 8192 [ 70.400186][ T4782] shmem 0 [ 70.403275][ T4782] mapped_file 0 [ 70.406887][ T4782] dirty 12288 [ 70.410547][ T4782] writeback 8192 [ 70.414261][ T4782] workingset_refault_anon 228 [ 70.419207][ T4782] workingset_refault_file 6 [ 70.424029][ T4782] swap 180224 [ 70.427514][ T4782] swapcached 8192 [ 70.431309][ T4782] pgpgin 4483 [ 70.434731][ T4782] pgpgout 4478 [ 70.438623][ T4782] pgfault 9690 [ 70.442059][ T4782] pgmajfault 94 [ 70.445598][ T4782] inactive_anon 0 [ 70.449297][ T4782] active_anon 0 [ 70.452938][ T4782] inactive_file 12288 [ 70.457154][ T4782] active_file 0 [ 70.460788][ T4782] unevictable 0 [ 70.464331][ T4782] hierarchical_memory_limit 314572800 [ 70.469806][ T4782] hierarchical_memsw_limit 9223372036854771712 [ 70.476178][ T4782] total_cache 12288 [ 70.479979][ T4782] total_rss 8192 [ 70.483590][ T4782] total_shmem 0 [ 70.487157][ T4782] total_mapped_file 0 [ 70.491173][ T4782] total_dirty 12288 [ 70.495004][ T4782] total_writeback 8192 [ 70.499082][ T4782] total_workingset_refault_anon 228 [ 70.504306][ T4782] total_workingset_refault_file 6 [ 70.509531][ T4782] total_swap 180224 [ 70.513447][ T4782] total_swapcached 8192 [ 70.517589][ T4782] total_pgpgin 4483 [ 70.521437][ T4782] total_pgpgout 4478 [ 70.525349][ T4782] total_pgfault 9690 [ 70.529300][ T4782] total_pgmajfault 94 [ 70.533317][ T4782] total_inactive_anon 0 [ 70.537464][ T4782] total_active_anon 0 [ 70.541518][ T4782] total_inactive_file 12288 [ 70.546106][ T4782] total_active_file 0 [ 70.550099][ T4782] total_unevictable 0 [ 70.554358][ T4782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4782,uid=0 [ 70.569963][ T4782] Memory cgroup out of memory: Killed process 4782 (syz-executor.3) total-vm:49640kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 70.590918][ T4806] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 70.602361][ T4806] CPU: 0 PID: 4806 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 70.614001][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 70.624360][ T4806] Call Trace: [ 70.627874][ T4806] [ 70.630801][ T4806] dump_stack_lvl+0xda/0x130 [ 70.635486][ T4806] dump_stack+0x15/0x20 [ 70.639710][ T4806] dump_header+0x82/0x2d0 [ 70.644143][ T4806] oom_kill_process+0x33a/0x4c0 [ 70.649042][ T4806] out_of_memory+0x9ca/0xbf0 [ 70.653647][ T4806] mem_cgroup_out_of_memory+0x139/0x190 [ 70.659247][ T4806] try_charge_memcg+0x75c/0xd30 [ 70.664135][ T4806] ? __swap_duplicate+0x29b/0x2b0 [ 70.669176][ T4806] ? radix_tree_lookup+0xf9/0x150 [ 70.674305][ T4806] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 70.680388][ T4806] __read_swap_cache_async+0x2f6/0x550 [ 70.685962][ T4806] swap_cluster_readahead+0x27c/0x4c0 [ 70.691364][ T4806] swapin_readahead+0xe9/0x7f0 [ 70.696327][ T4806] ? __filemap_get_folio+0x41a/0x5a0 [ 70.701645][ T4806] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 70.707469][ T4806] ? swap_cache_get_folio+0x6e/0x200 [ 70.712865][ T4806] do_swap_page+0x4a0/0x1670 [ 70.717537][ T4806] ? cgroup_rstat_updated+0x8c/0x1c0 [ 70.722832][ T4806] ? __rcu_read_lock+0x35/0x50 [ 70.727669][ T4806] ? pte_offset_map_nolock+0x124/0x1d0 [ 70.733219][ T4806] handle_mm_fault+0xa36/0x2dd0 [ 70.738138][ T4806] exc_page_fault+0x3ff/0x6c0 [ 70.742892][ T4806] asm_exc_page_fault+0x26/0x30 [ 70.747743][ T4806] RIP: 0033:0x7f552c4a991c [ 70.752260][ T4806] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 41 55 49 89 fd 41 54 55 53 48 83 ec 08 40 84 f6 0f 84 16 02 00 00 31 d2 <48> 39 3d 4d 66 16 00 0f 95 c2 31 ed 48 83 bf 88 00 00 00 ff 8d 14 [ 70.771864][ T4806] RSP: 002b:00007ffd3ef5acd0 EFLAGS: 00010246 [ 70.777958][ T4806] RAX: 00007f552c0746e8 RBX: 00007f552c610050 RCX: 00007f552c074000 [ 70.786102][ T4806] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f552c610050 [ 70.794113][ T4806] RBP: 0000000000000032 R08: 00007f552c474000 R09: 00007f552c61005c [ 70.802104][ T4806] R10: 00007ffd3ef5ae70 R11: 0000000000000246 R12: 00007f552c60c0c0 [ 70.810148][ T4806] R13: 00007f552c610050 R14: 00007ffd3ef5ae90 R15: 00007f552c610050 [ 70.818200][ T4806] [ 70.821339][ T4806] memory: usage 8416kB, limit 307200kB, failcnt 12580 [ 70.828224][ T4806] memory+swap: usage 556kB, limit 9007199254740988kB, failcnt 0 [ 70.835988][ T4806] kmem: usage 208kB, limit 9007199254740988kB, failcnt 0 [ 70.843047][ T4806] Memory cgroup stats for /syz2: [ 70.847191][ T4806] cache 12288 [ 70.855679][ T4806] rss 20480 [ 70.858794][ T4806] shmem 0 [ 70.861738][ T4806] mapped_file 0 [ 70.866365][ T4806] dirty 4096 [ 70.869733][ T4806] writeback 0 [ 70.873058][ T4806] workingset_refault_anon 1445 [ 70.878121][ T4806] workingset_refault_file 4 [ 70.882629][ T4806] swap 188416 [ 70.885924][ T4806] swapcached 20480 [ 70.889656][ T4806] pgpgin 2837 [ 70.893043][ T4806] pgpgout 2828 [ 70.896403][ T4806] pgfault 6841 [ 70.899813][ T4806] pgmajfault 455 [ 70.903369][ T4806] inactive_anon 24576 [ 70.907353][ T4806] active_anon 0 [ 70.910806][ T4806] inactive_file 0 [ 70.914450][ T4806] active_file 12288 [ 70.918252][ T4806] unevictable 0 [ 70.921796][ T4806] hierarchical_memory_limit 314572800 [ 70.927192][ T4806] hierarchical_memsw_limit 9223372036854771712 [ 70.933358][ T4806] total_cache 12288 [ 70.937243][ T4806] total_rss 20480 [ 70.940874][ T4806] total_shmem 0 [ 70.944531][ T4806] total_mapped_file 0 [ 70.948599][ T4806] total_dirty 4096 [ 70.952393][ T4806] total_writeback 0 [ 70.956224][ T4806] total_workingset_refault_anon 1445 [ 70.961746][ T4806] total_workingset_refault_file 4 [ 70.966821][ T4806] total_swap 188416 [ 70.970750][ T4806] total_swapcached 20480 [ 70.975012][ T4806] total_pgpgin 2837 [ 70.978970][ T4806] total_pgpgout 2828 [ 70.982887][ T4806] total_pgfault 6841 [ 70.986784][ T4806] total_pgmajfault 455 [ 70.990839][ T4806] total_inactive_anon 24576 [ 70.995345][ T4806] total_active_anon 0 [ 70.999321][ T4806] total_inactive_file 0 [ 71.003597][ T4806] total_active_file 12288 [ 71.008003][ T4806] total_unevictable 0 [ 71.012150][ T4806] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4806,uid=0 09:25:38 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 09:25:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:38 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:38 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)) r7 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:38 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 71.027530][ T4806] Memory cgroup out of memory: Killed process 4806 (syz-executor.2) total-vm:46436kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:38 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 71.512503][ T4815] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 71.523905][ T4815] CPU: 0 PID: 4815 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 71.534849][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 71.545079][ T4815] Call Trace: [ 71.548433][ T4815] [ 71.551560][ T4815] dump_stack_lvl+0xda/0x130 [ 71.556491][ T4815] dump_stack+0x15/0x20 [ 71.560768][ T4815] dump_header+0x82/0x2d0 [ 71.565154][ T4815] oom_kill_process+0x33a/0x4c0 [ 71.570359][ T4815] out_of_memory+0x9ca/0xbf0 [ 71.575148][ T4815] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 71.581584][ T4815] mem_cgroup_out_of_memory+0x139/0x190 [ 71.587354][ T4815] try_charge_memcg+0x75c/0xd30 [ 71.592250][ T4815] ? __swap_duplicate+0x29b/0x2b0 [ 71.597725][ T4815] ? radix_tree_lookup+0xf9/0x150 [ 71.603233][ T4815] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 71.609502][ T4815] __read_swap_cache_async+0x2f6/0x550 [ 71.614987][ T4815] swap_cluster_readahead+0x27c/0x4c0 [ 71.620371][ T4815] swapin_readahead+0xe9/0x7f0 [ 71.625146][ T4815] ? __filemap_get_folio+0x41a/0x5a0 [ 71.630787][ T4815] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 71.636531][ T4815] ? swap_cache_get_folio+0x6e/0x200 [ 71.642009][ T4815] do_swap_page+0x4a0/0x1670 [ 71.646665][ T4815] ? cgroup_rstat_updated+0x8c/0x1c0 [ 71.652130][ T4815] ? __rcu_read_lock+0x35/0x50 [ 71.656983][ T4815] ? pte_offset_map_nolock+0x124/0x1d0 [ 71.662650][ T4815] handle_mm_fault+0xa36/0x2dd0 [ 71.667600][ T4815] exc_page_fault+0x3ff/0x6c0 [ 71.672293][ T4815] asm_exc_page_fault+0x26/0x30 [ 71.677269][ T4815] RIP: 0033:0x7f1f0c21fce4 [ 71.681692][ T4815] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 71.701409][ T4815] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 71.707659][ T4815] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 71.715737][ T4815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 71.723800][ T4815] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 71.731873][ T4815] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000118fa [ 71.739962][ T4815] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 00000000000115b9 [ 71.747952][ T4815] [ 71.751152][ T4815] memory: usage 307200kB, limit 307200kB, failcnt 3732 [ 71.758295][ T4815] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 71.766382][ T4815] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 71.773863][ T4815] Memory cgroup stats for /syz5: [ 71.776529][ T4815] cache 4096 [ 71.784800][ T4815] rss 8192 [ 71.787815][ T4815] shmem 0 [ 71.790818][ T4815] mapped_file 0 [ 71.794455][ T4815] dirty 4096 [ 71.797722][ T4815] writeback 0 [ 71.801145][ T4815] workingset_refault_anon 493 [ 71.805867][ T4815] workingset_refault_file 3 [ 71.810491][ T4815] swap 176128 [ 71.813895][ T4815] swapcached 16384 [ 71.817881][ T4815] pgpgin 3551 [ 71.821573][ T4815] pgpgout 3546 [ 71.824960][ T4815] pgfault 8089 [ 71.828398][ T4815] pgmajfault 147 [ 71.831983][ T4815] inactive_anon 0 [ 71.835626][ T4815] active_anon 0 [ 71.839189][ T4815] inactive_file 0 [ 71.842878][ T4815] active_file 4096 [ 71.846636][ T4815] unevictable 0 [ 71.850127][ T4815] hierarchical_memory_limit 314572800 [ 71.855565][ T4815] hierarchical_memsw_limit 9223372036854771712 [ 71.861717][ T4815] total_cache 4096 [ 71.865508][ T4815] total_rss 8192 [ 71.869054][ T4815] total_shmem 0 [ 71.872511][ T4815] total_mapped_file 0 [ 71.876566][ T4815] total_dirty 4096 [ 71.880415][ T4815] total_writeback 0 [ 71.884282][ T4815] total_workingset_refault_anon 493 [ 71.889507][ T4815] total_workingset_refault_file 3 [ 71.894638][ T4815] total_swap 176128 [ 71.898569][ T4815] total_swapcached 16384 [ 71.902858][ T4815] total_pgpgin 3551 [ 71.906856][ T4815] total_pgpgout 3546 [ 71.910750][ T4815] total_pgfault 8089 [ 71.914776][ T4815] total_pgmajfault 147 [ 71.918902][ T4815] total_inactive_anon 0 [ 71.923070][ T4815] total_active_anon 0 [ 71.927071][ T4815] total_inactive_file 0 [ 71.931226][ T4815] total_active_file 4096 [ 71.935594][ T4815] total_unevictable 0 [ 71.939779][ T4815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4815,uid=0 09:25:39 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:39 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 09:25:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r6 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r8 = pidfd_getfd(r2, r3, 0x0) r9 = pidfd_getfd(r4, r3, 0x0) r10 = fsmount(r2, 0x0, 0x8) r11 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r8, r1, r9, r2, r10, r11], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r13, 0xfffffffd, '\x00', r14, r8, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r12, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r14, 0x25, r11, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) [ 71.955329][ T4815] Memory cgroup out of memory: Killed process 4815 (syz-executor.5) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:39 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) [ 72.414728][ T4839] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 72.426531][ T4839] CPU: 0 PID: 4839 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 72.437071][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.447224][ T4839] Call Trace: [ 72.450533][ T4839] [ 72.453469][ T4839] dump_stack_lvl+0xda/0x130 [ 72.458085][ T4839] dump_stack+0x15/0x20 [ 72.462754][ T4839] dump_header+0x82/0x2d0 [ 72.467172][ T4839] oom_kill_process+0x33a/0x4c0 [ 72.472451][ T4839] out_of_memory+0x9ca/0xbf0 [ 72.477078][ T4839] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 72.483274][ T4839] mem_cgroup_out_of_memory+0x139/0x190 [ 72.489054][ T4839] try_charge_memcg+0x75c/0xd30 [ 72.494640][ T4839] ? __swap_duplicate+0x29b/0x2b0 [ 72.499728][ T4839] ? radix_tree_lookup+0xf9/0x150 [ 72.504837][ T4839] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 72.511396][ T4839] __read_swap_cache_async+0x2f6/0x550 [ 72.516917][ T4839] swap_cluster_readahead+0x27c/0x4c0 [ 72.522657][ T4839] swapin_readahead+0xe9/0x7f0 [ 72.527436][ T4839] ? __filemap_get_folio+0x41a/0x5a0 [ 72.532918][ T4839] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 72.538584][ T4839] ? swap_cache_get_folio+0x6e/0x200 [ 72.543941][ T4839] do_swap_page+0x4a0/0x1670 [ 72.548692][ T4839] ? cgroup_rstat_updated+0x8c/0x1c0 [ 72.554040][ T4839] ? __rcu_read_lock+0x35/0x50 [ 72.559227][ T4839] ? pte_offset_map_nolock+0x124/0x1d0 [ 72.564745][ T4839] handle_mm_fault+0xa36/0x2dd0 [ 72.569963][ T4839] exc_page_fault+0x3ff/0x6c0 [ 72.574924][ T4839] asm_exc_page_fault+0x26/0x30 [ 72.579946][ T4839] RIP: 0033:0x7f1f0c21fce4 [ 72.584376][ T4839] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 72.604211][ T4839] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 72.610561][ T4839] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 72.619319][ T4839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 72.627459][ T4839] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 72.636323][ T4839] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000011c79 [ 72.644533][ T4839] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000011938 [ 72.652982][ T4839] [ 72.656189][ T4839] memory: usage 307200kB, limit 307200kB, failcnt 3839 [ 72.663268][ T4839] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 72.671181][ T4839] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 72.678690][ T4839] Memory cgroup stats for /syz5: [ 72.685105][ T4839] cache 4096 [ 72.693544][ T4839] rss 8192 [ 72.696592][ T4839] shmem 0 [ 72.699697][ T4839] mapped_file 0 [ 72.703195][ T4839] dirty 4096 [ 72.706457][ T4839] writeback 8192 [ 72.710180][ T4839] workingset_refault_anon 514 [ 72.714910][ T4839] workingset_refault_file 3 [ 72.720591][ T4839] swap 176128 [ 72.724087][ T4839] swapcached 16384 [ 72.727813][ T4839] pgpgin 3599 [ 72.731107][ T4839] pgpgout 3594 [ 72.734886][ T4839] pgfault 8195 [ 72.738374][ T4839] pgmajfault 162 [ 72.742743][ T4839] inactive_anon 0 [ 72.746417][ T4839] active_anon 0 [ 72.749892][ T4839] inactive_file 0 [ 72.753583][ T4839] active_file 4096 [ 72.757312][ T4839] unevictable 0 [ 72.760856][ T4839] hierarchical_memory_limit 314572800 [ 72.766386][ T4839] hierarchical_memsw_limit 9223372036854771712 [ 72.772742][ T4839] total_cache 4096 [ 72.776495][ T4839] total_rss 8192 [ 72.780056][ T4839] total_shmem 0 [ 72.783591][ T4839] total_mapped_file 0 [ 72.787582][ T4839] total_dirty 4096 [ 72.791354][ T4839] total_writeback 8192 [ 72.795576][ T4839] total_workingset_refault_anon 514 [ 72.801569][ T4839] total_workingset_refault_file 3 [ 72.806767][ T4839] total_swap 176128 [ 72.810675][ T4839] total_swapcached 16384 [ 72.815011][ T4839] total_pgpgin 3599 [ 72.819073][ T4839] total_pgpgout 3594 [ 72.823272][ T4839] total_pgfault 8195 [ 72.827273][ T4839] total_pgmajfault 162 [ 72.831357][ T4839] total_inactive_anon 0 [ 72.835589][ T4839] total_active_anon 0 [ 72.839583][ T4839] total_inactive_file 0 [ 72.843850][ T4839] total_active_file 4096 [ 72.848122][ T4839] total_unevictable 0 [ 72.852106][ T4839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4839,uid=0 [ 72.867429][ T4839] Memory cgroup out of memory: Killed process 4839 (syz-executor.5) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:40 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) getpgrp(r5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:40 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:40 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r6 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r8 = pidfd_getfd(r2, r3, 0x0) r9 = pidfd_getfd(r4, r3, 0x0) r10 = fsmount(r2, 0x0, 0x8) r11 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r8, r1, r9, r2, r10, r11], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r13, 0xfffffffd, '\x00', r14, r8, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r12, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r14, 0x25, r11, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:40 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 09:25:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:40 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:40 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) [ 73.463754][ T4868] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 73.475129][ T4868] CPU: 1 PID: 4868 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 73.485579][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 73.495729][ T4868] Call Trace: [ 73.499010][ T4868] [ 73.501976][ T4868] dump_stack_lvl+0xda/0x130 [ 73.506853][ T4868] dump_stack+0x15/0x20 [ 73.511019][ T4868] dump_header+0x82/0x2d0 [ 73.515361][ T4868] oom_kill_process+0x33a/0x4c0 [ 73.523090][ T4868] out_of_memory+0x9ca/0xbf0 [ 73.527688][ T4868] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 73.533753][ T4868] mem_cgroup_out_of_memory+0x139/0x190 [ 73.539746][ T4868] try_charge_memcg+0x75c/0xd30 [ 73.544952][ T4868] ? __swap_duplicate+0x29b/0x2b0 [ 73.550056][ T4868] ? radix_tree_lookup+0xf9/0x150 [ 73.555163][ T4868] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 73.561282][ T4868] __read_swap_cache_async+0x2f6/0x550 [ 73.566762][ T4868] swap_cluster_readahead+0x27c/0x4c0 [ 73.572145][ T4868] swapin_readahead+0xe9/0x7f0 [ 73.576931][ T4868] ? __filemap_get_folio+0x41a/0x5a0 [ 73.582241][ T4868] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 73.587878][ T4868] ? swap_cache_get_folio+0x6e/0x200 [ 73.593483][ T4868] do_swap_page+0x4a0/0x1670 [ 73.598161][ T4868] ? cgroup_rstat_updated+0x8c/0x1c0 [ 73.603563][ T4868] ? __rcu_read_lock+0x35/0x50 [ 73.608583][ T4868] ? pte_offset_map_nolock+0x124/0x1d0 [ 73.614602][ T4868] handle_mm_fault+0xa36/0x2dd0 [ 73.619555][ T4868] exc_page_fault+0x3ff/0x6c0 [ 73.624334][ T4868] asm_exc_page_fault+0x26/0x30 [ 73.629293][ T4868] RIP: 0033:0x7f552c4aace4 [ 73.633715][ T4868] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 73.653692][ T4868] RSP: 002b:00007ffd3ef5ad40 EFLAGS: 00010202 [ 73.659836][ T4868] RAX: 0000000000000000 RBX: 00007f552c60ff80 RCX: 0000000000000000 [ 73.668063][ T4868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555e90788 [ 73.676031][ T4868] RBP: 00007f552c611980 R08: 0000000000000000 R09: 00007ffd3eff00b0 [ 73.684177][ T4868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000012079 [ 73.692262][ T4868] R13: ffffffffffffffff R14: 00007f552c074000 R15: 0000000000011d38 [ 73.700324][ T4868] [ 73.703459][ T4868] memory: usage 307200kB, limit 307200kB, failcnt 12913 [ 73.710741][ T4868] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 73.719007][ T4868] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 73.726978][ T4868] Memory cgroup stats for /syz2: [ 73.727250][ T4868] cache 8192 [ 73.735751][ T4868] rss 20480 [ 73.738933][ T4868] shmem 0 [ 73.741864][ T4868] mapped_file 0 [ 73.745513][ T4868] dirty 4096 [ 73.748762][ T4868] writeback 12288 [ 73.752534][ T4868] workingset_refault_anon 1545 [ 73.757448][ T4868] workingset_refault_file 4 [ 73.761994][ T4868] swap 172032 [ 73.767482][ T4868] swapcached 20480 [ 73.771207][ T4868] pgpgin 3024 [ 73.774854][ T4868] pgpgout 3017 [ 73.778241][ T4868] pgfault 7316 [ 73.781736][ T4868] pgmajfault 504 [ 73.785330][ T4868] inactive_anon 0 [ 73.788998][ T4868] active_anon 0 [ 73.792758][ T4868] inactive_file 0 [ 73.796719][ T4868] active_file 8192 [ 73.800600][ T4868] unevictable 0 [ 73.804083][ T4868] hierarchical_memory_limit 314572800 [ 73.809473][ T4868] hierarchical_memsw_limit 9223372036854771712 [ 73.815845][ T4868] total_cache 8192 [ 73.819554][ T4868] total_rss 20480 [ 73.823447][ T4868] total_shmem 0 [ 73.827069][ T4868] total_mapped_file 0 [ 73.831114][ T4868] total_dirty 4096 [ 73.834992][ T4868] total_writeback 12288 [ 73.839410][ T4868] total_workingset_refault_anon 1545 [ 73.844818][ T4868] total_workingset_refault_file 4 [ 73.849922][ T4868] total_swap 172032 [ 73.853749][ T4868] total_swapcached 20480 [ 73.857998][ T4868] total_pgpgin 3024 [ 73.861859][ T4868] total_pgpgout 3017 [ 73.865790][ T4868] total_pgfault 7316 [ 73.869695][ T4868] total_pgmajfault 504 [ 73.873794][ T4868] total_inactive_anon 0 [ 73.878226][ T4868] total_active_anon 0 [ 73.882489][ T4868] total_inactive_file 0 [ 73.886728][ T4868] total_active_file 8192 [ 73.891050][ T4868] total_unevictable 0 [ 73.895091][ T4868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4868,uid=0 [ 73.910859][ T4868] Memory cgroup out of memory: Killed process 4868 (syz-executor.2) total-vm:46436kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:41 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:41 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) 09:25:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:41 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:41 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:41 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r6 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r8 = pidfd_getfd(r2, r3, 0x0) r9 = pidfd_getfd(r4, r3, 0x0) r10 = fsmount(r2, 0x0, 0x8) r11 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r8, r1, r9, r2, r10, r11], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r13, 0xfffffffd, '\x00', r14, r8, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r12, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r14, 0x25, r11, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:41 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 74.598460][ T3093] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 74.609947][ T3093] CPU: 0 PID: 3093 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 74.620465][ T3093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 74.630873][ T3093] Call Trace: [ 74.634428][ T3093] [ 74.638490][ T3093] dump_stack_lvl+0xda/0x130 [ 74.643156][ T3093] dump_stack+0x15/0x20 [ 74.648728][ T3093] dump_header+0x82/0x2d0 [ 74.653231][ T3093] oom_kill_process+0x33a/0x4c0 [ 74.658278][ T3093] out_of_memory+0x9ca/0xbf0 [ 74.663168][ T3093] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 74.669348][ T3093] mem_cgroup_out_of_memory+0x139/0x190 [ 74.675050][ T3093] try_charge_memcg+0x75c/0xd30 [ 74.680109][ T3093] ? __swap_duplicate+0x29b/0x2b0 [ 74.685252][ T3093] ? radix_tree_lookup+0xf9/0x150 [ 74.690393][ T3093] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 74.696634][ T3093] __read_swap_cache_async+0x2f6/0x550 [ 74.702278][ T3093] swap_cluster_readahead+0x27c/0x4c0 [ 74.707749][ T3093] swapin_readahead+0xe9/0x7f0 [ 74.712631][ T3093] ? __filemap_get_folio+0x41a/0x5a0 [ 74.717980][ T3093] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 74.723854][ T3093] ? swap_cache_get_folio+0x6e/0x200 [ 74.729264][ T3093] do_swap_page+0x4a0/0x1670 [ 74.733882][ T3093] ? __rcu_read_lock+0x35/0x50 [ 74.738650][ T3093] ? pte_offset_map_nolock+0x124/0x1d0 [ 74.744294][ T3093] handle_mm_fault+0xa36/0x2dd0 [ 74.749156][ T3093] ? mt_find+0x1d9/0x310 [ 74.753713][ T3093] exc_page_fault+0x2f7/0x6c0 [ 74.758491][ T3093] asm_exc_page_fault+0x26/0x30 [ 74.763962][ T3093] RIP: 0010:__get_user_8+0x11/0x20 [ 74.769302][ T3093] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 8b 10 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb [ 74.789568][ T3093] RSP: 0018:ffffc900006d3df8 EFLAGS: 00050202 [ 74.795649][ T3093] RAX: 0000555557513da8 RBX: ffffc900006d3e00 RCX: ffffffff81443ea3 [ 74.803633][ T3093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103c1db10 [ 74.811702][ T3093] RBP: ffffc900006d3ec0 R08: 0001888103c1db17 R09: 0000000000000000 [ 74.820041][ T3093] R10: 0001ffffffffffff R11: 0000000000004722 R12: ffff888103c1d140 [ 74.828047][ T3093] R13: ffff888103c1db10 R14: ffffc900006d3f58 R15: ffffc900006d3fd8 [ 74.836079][ T3093] ? __rseq_handle_notify_resume+0xb3/0xbf0 [ 74.841992][ T3093] __rseq_handle_notify_resume+0xc7/0xbf0 [ 74.847724][ T3093] ? blkcg_maybe_throttle_current+0xa0/0x710 [ 74.853819][ T3093] ? mem_cgroup_handle_over_high+0x2c/0x1b0 [ 74.859740][ T3093] ? common_nsleep+0x68/0x80 [ 74.864372][ T3093] exit_to_user_mode_loop+0xcc/0xe0 [ 74.869683][ T3093] exit_to_user_mode_prepare+0x6c/0xb0 [ 74.875230][ T3093] syscall_exit_to_user_mode+0x26/0x140 [ 74.880948][ T3093] do_syscall_64+0x50/0x110 [ 74.885522][ T3093] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 74.891504][ T3093] RIP: 0033:0x7f3338ca60b3 [ 74.895924][ T3093] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 4e 5e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 74.915786][ T3093] RSP: 002b:00007ffc9aa5c5a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 74.924267][ T3093] RAX: 0000000000000000 RBX: 0000000000000141 RCX: 00007f3338ca60b3 [ 74.932328][ T3093] RDX: 00007ffc9aa5c5c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.940361][ T3093] RBP: 00007ffc9aa5c64c R08: 0000000000000010 R09: 00007ffc9abf80b0 [ 74.948434][ T3093] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 74.956422][ T3093] R13: 00000000000121fb R14: 00000000000121a1 R15: 0000000000000017 [ 74.964754][ T3093] [ 74.967990][ T3093] memory: usage 4372kB, limit 307200kB, failcnt 2167 [ 74.974696][ T3093] memory+swap: usage 4516kB, limit 9007199254740988kB, failcnt 0 [ 74.982414][ T3093] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 74.989549][ T3093] Memory cgroup stats for /syz3: [ 74.991598][ T3093] cache 16384 [ 74.999936][ T3093] rss 4096 [ 75.002949][ T3093] shmem 0 [ 75.005915][ T3093] mapped_file 0 [ 75.009433][ T3093] dirty 12288 [ 75.013028][ T3093] writeback 0 [ 75.016313][ T3093] workingset_refault_anon 398 [ 75.020992][ T3093] workingset_refault_file 8 [ 75.025557][ T3093] swap 147456 [ 75.028848][ T3093] swapcached 40960 [ 75.032565][ T3093] pgpgin 4763 [ 75.036146][ T3093] pgpgout 4749 [ 75.039642][ T3093] pgfault 10243 [ 75.043096][ T3093] pgmajfault 141 [ 75.046752][ T3093] inactive_anon 40960 [ 75.050720][ T3093] active_anon 0 [ 75.054295][ T3093] inactive_file 12288 [ 75.058270][ T3093] active_file 4096 [ 75.061976][ T3093] unevictable 0 [ 75.065450][ T3093] hierarchical_memory_limit 314572800 [ 75.070808][ T3093] hierarchical_memsw_limit 9223372036854771712 [ 75.076999][ T3093] total_cache 16384 [ 75.080802][ T3093] total_rss 4096 [ 75.084357][ T3093] total_shmem 0 [ 75.087814][ T3093] total_mapped_file 0 [ 75.091881][ T3093] total_dirty 12288 [ 75.095739][ T3093] total_writeback 0 [ 75.099588][ T3093] total_workingset_refault_anon 398 [ 75.104803][ T3093] total_workingset_refault_file 8 [ 75.109898][ T3093] total_swap 147456 [ 75.113754][ T3093] total_swapcached 40960 [ 75.117989][ T3093] total_pgpgin 4763 [ 75.122757][ T3093] total_pgpgout 4749 [ 75.126658][ T3093] total_pgfault 10243 [ 75.130632][ T3093] total_pgmajfault 141 [ 75.134772][ T3093] total_inactive_anon 40960 [ 75.139304][ T3093] total_active_anon 0 [ 75.143299][ T3093] total_inactive_file 12288 09:25:42 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:42 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:42 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7d) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:42 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r8 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = pidfd_getfd(r2, r3, 0x0) r11 = pidfd_getfd(r4, r3, 0x0) r12 = fsmount(r2, 0x0, 0x8) r13 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r10, r1, r11, r2, r12, r13], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r14 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r10, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r14, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r16, 0x25, r13, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 75.147894][ T3093] total_active_file 4096 [ 75.152125][ T3093] total_unevictable 0 [ 75.156114][ T3093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4896,uid=0 [ 75.171414][ T3093] Memory cgroup out of memory: Killed process 4896 (syz-executor.3) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 09:25:42 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) 09:25:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:42 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:42 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 09:25:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) [ 75.652137][ T4935] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 75.663706][ T4935] CPU: 1 PID: 4935 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 75.674036][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 75.684336][ T4935] Call Trace: [ 75.687816][ T4935] [ 75.690858][ T4935] dump_stack_lvl+0xda/0x130 [ 75.695471][ T4935] dump_stack+0x15/0x20 [ 75.699719][ T4935] dump_header+0x82/0x2d0 [ 75.704067][ T4935] oom_kill_process+0x33a/0x4c0 [ 75.708984][ T4935] out_of_memory+0x9ca/0xbf0 [ 75.713854][ T4935] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 75.719988][ T4935] mem_cgroup_out_of_memory+0x139/0x190 [ 75.725822][ T4935] try_charge_memcg+0x75c/0xd30 [ 75.730711][ T4935] ? __swap_duplicate+0x29b/0x2b0 [ 75.735801][ T4935] ? radix_tree_lookup+0xf9/0x150 [ 75.741017][ T4935] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 75.747199][ T4935] __read_swap_cache_async+0x2f6/0x550 [ 75.753043][ T4935] swap_cluster_readahead+0x27c/0x4c0 [ 75.758453][ T4935] swapin_readahead+0xe9/0x7f0 [ 75.763343][ T4935] ? __filemap_get_folio+0x41a/0x5a0 [ 75.768689][ T4935] ? swap_cache_get_folio+0x6e/0x200 [ 75.774154][ T4935] do_swap_page+0x4a0/0x1670 [ 75.778833][ T4935] ? cgroup_rstat_updated+0x8c/0x1c0 [ 75.784342][ T4935] ? __rcu_read_lock+0x35/0x50 [ 75.789509][ T4935] ? pte_offset_map_nolock+0x124/0x1d0 [ 75.795011][ T4935] handle_mm_fault+0xa36/0x2dd0 [ 75.799903][ T4935] exc_page_fault+0x3ff/0x6c0 [ 75.804618][ T4935] asm_exc_page_fault+0x26/0x30 [ 75.809688][ T4935] RIP: 0033:0x7f1f0c21fcbd [ 75.814203][ T4935] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6c 16 00 00 0f 8e 12 ff ff ff e8 6c 06 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 [ 75.834007][ T4935] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 75.840070][ T4935] RAX: 000000000001275d RBX: 00007f1f0c386980 RCX: 00000000000124f8 [ 75.848152][ T4935] RDX: 0000000000000265 RSI: 00007ffc4034eea0 RDI: 7fffffffffffffff [ 75.856122][ T4935] RBP: 00007f1f0c386980 R08: 0000000000000010 R09: 00007ffc403d00b0 [ 75.864219][ T4935] R10: 00007ffc403d0080 R11: 00000000000032fc R12: 000000000001292e [ 75.872328][ T4935] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 00000000000125ed [ 75.880605][ T4935] [ 75.883756][ T4935] memory: usage 307200kB, limit 307200kB, failcnt 4606 [ 75.890594][ T4935] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 75.898879][ T4935] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 75.906635][ T4935] Memory cgroup stats for /syz5: [ 75.906772][ T4935] cache 4096 [ 75.915020][ T4935] rss 8192 [ 75.918096][ T4935] shmem 0 [ 75.921095][ T4935] mapped_file 0 [ 75.924624][ T4935] dirty 4096 [ 75.927819][ T4935] writeback 8192 [ 75.931358][ T4935] workingset_refault_anon 635 [ 75.936221][ T4935] workingset_refault_file 3 [ 75.940715][ T4935] swap 172032 [ 75.944028][ T4935] swapcached 20480 [ 75.947754][ T4935] pgpgin 3801 [ 75.951033][ T4935] pgpgout 3795 [ 75.954421][ T4935] pgfault 8656 [ 75.957790][ T4935] pgmajfault 204 [ 75.961410][ T4935] inactive_anon 8192 [ 75.965336][ T4935] active_anon 0 [ 75.968784][ T4935] inactive_file 4096 [ 75.972754][ T4935] active_file 0 [ 75.976236][ T4935] unevictable 0 [ 75.979765][ T4935] hierarchical_memory_limit 314572800 [ 75.985179][ T4935] hierarchical_memsw_limit 9223372036854771712 [ 75.991336][ T4935] total_cache 4096 [ 75.995070][ T4935] total_rss 8192 [ 75.998639][ T4935] total_shmem 0 [ 76.002167][ T4935] total_mapped_file 0 [ 76.006434][ T4935] total_dirty 4096 [ 76.010154][ T4935] total_writeback 8192 [ 76.014324][ T4935] total_workingset_refault_anon 635 [ 76.019611][ T4935] total_workingset_refault_file 3 [ 76.024736][ T4935] total_swap 172032 [ 76.028587][ T4935] total_swapcached 20480 [ 76.032941][ T4935] total_pgpgin 3801 [ 76.036942][ T4935] total_pgpgout 3795 [ 76.040957][ T4935] total_pgfault 8656 [ 76.044935][ T4935] total_pgmajfault 204 [ 76.049058][ T4935] total_inactive_anon 8192 [ 76.053612][ T4935] total_active_anon 0 [ 76.057766][ T4935] total_inactive_file 4096 [ 76.062358][ T4935] total_active_file 0 [ 76.066475][ T4935] total_unevictable 0 [ 76.070462][ T4935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4935,uid=0 [ 76.085854][ T4935] Memory cgroup out of memory: Killed process 4935 (syz-executor.5) total-vm:49640kB, anon-rss:504kB, file-rss:9020kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:43 executing program 0: syz_clone3(0x0, 0x0) 09:25:43 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) 09:25:43 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:43 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r8 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = pidfd_getfd(r2, r3, 0x0) r11 = pidfd_getfd(r4, r3, 0x0) r12 = fsmount(r2, 0x0, 0x8) r13 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r10, r1, r11, r2, r12, r13], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r14 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r10, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r14, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r16, 0x25, r13, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) fsmount(r1, 0x0, 0x7d) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:43 executing program 0: syz_clone3(0x0, 0x0) 09:25:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(0x0, 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:43 executing program 0: syz_clone3(0x0, 0x0) 09:25:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(0x0, 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:43 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 76.722491][ T4969] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 76.734157][ T4969] CPU: 0 PID: 4969 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 76.744496][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 76.755088][ T4969] Call Trace: [ 76.758373][ T4969] [ 76.761389][ T4969] dump_stack_lvl+0xda/0x130 [ 76.766057][ T4969] dump_stack+0x15/0x20 [ 76.770257][ T4969] dump_header+0x82/0x2d0 [ 76.774651][ T4969] oom_kill_process+0x33a/0x4c0 [ 76.779687][ T4969] out_of_memory+0x9ca/0xbf0 [ 76.784294][ T4969] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 76.790560][ T4969] mem_cgroup_out_of_memory+0x139/0x190 [ 76.796253][ T4969] try_charge_memcg+0x75c/0xd30 [ 76.801368][ T4969] ? __swap_duplicate+0x29b/0x2b0 [ 76.806536][ T4969] ? radix_tree_lookup+0xf9/0x150 [ 76.811820][ T4969] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 76.818092][ T4969] __read_swap_cache_async+0x2f6/0x550 [ 76.823954][ T4969] swap_cluster_readahead+0x27c/0x4c0 [ 76.829394][ T4969] swapin_readahead+0xe9/0x7f0 [ 76.834369][ T4969] ? __filemap_get_folio+0x41a/0x5a0 [ 76.839777][ T4969] ? swap_cache_get_folio+0x6e/0x200 [ 76.845173][ T4969] do_swap_page+0x4a0/0x1670 [ 76.852073][ T4969] ? cgroup_rstat_updated+0x8c/0x1c0 [ 76.857480][ T4969] ? __rcu_read_lock+0x35/0x50 [ 76.862436][ T4969] ? pte_offset_map_nolock+0x124/0x1d0 [ 76.867921][ T4969] handle_mm_fault+0xa36/0x2dd0 [ 76.873055][ T4969] exc_page_fault+0x3ff/0x6c0 [ 76.877785][ T4969] asm_exc_page_fault+0x26/0x30 [ 76.882715][ T4969] RIP: 0033:0x7f1f0c21fcbd [ 76.887256][ T4969] Code: 31 d2 48 f7 f1 4c 01 f8 49 39 c4 4c 0f 42 e0 83 3d df 6c 16 00 00 0f 8e 12 ff ff ff e8 6c 06 ff ff 49 39 c4 0f 82 60 01 00 00 <69> 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 [ 76.907264][ T4969] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010216 [ 76.913354][ T4969] RAX: 0000000000012b9b RBX: 00007f1f0c386980 RCX: 00000000000128e0 [ 76.921526][ T4969] RDX: 00000000000002bb RSI: 00007ffc4034eea0 RDI: 7fffffffffffffff [ 76.929772][ T4969] RBP: 00007f1f0c386980 R08: 0000000000000010 R09: 00007ffc403d00b0 [ 76.937774][ T4969] R10: 00007ffc403d0080 R11: 00000000000033ac R12: 0000000000012d41 [ 76.946330][ T4969] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000012a00 [ 76.955710][ T4969] [ 76.958942][ T4969] memory: usage 307200kB, limit 307200kB, failcnt 4865 09:25:44 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) [ 76.966267][ T4969] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 76.974596][ T4969] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 76.983469][ T4969] Memory cgroup stats for /syz5: [ 76.984499][ T4969] cache 4096 [ 76.993047][ T4969] rss 8192 [ 76.996456][ T4969] shmem 0 [ 76.999554][ T4969] mapped_file 0 [ 77.003215][ T4969] dirty 4096 [ 77.006501][ T4969] writeback 8192 [ 77.010170][ T4969] workingset_refault_anon 665 [ 77.015153][ T4969] workingset_refault_file 3 [ 77.019682][ T4969] swap 237568 [ 77.023062][ T4969] swapcached 36864 [ 77.026873][ T4969] pgpgin 3858 [ 77.030181][ T4969] pgpgout 3848 [ 77.033618][ T4969] pgfault 8807 [ 77.037172][ T4969] pgmajfault 217 [ 77.040738][ T4969] inactive_anon 0 [ 77.044527][ T4969] active_anon 0 [ 77.048030][ T4969] inactive_file 4096 [ 77.051995][ T4969] active_file 0 [ 77.055560][ T4969] unevictable 0 [ 77.059191][ T4969] hierarchical_memory_limit 314572800 [ 77.064869][ T4969] hierarchical_memsw_limit 9223372036854771712 [ 77.071040][ T4969] total_cache 4096 [ 77.074990][ T4969] total_rss 8192 [ 77.078574][ T4969] total_shmem 0 [ 77.082041][ T4969] total_mapped_file 0 [ 77.086042][ T4969] total_dirty 4096 [ 77.089943][ T4969] total_writeback 8192 [ 77.094118][ T4969] total_workingset_refault_anon 665 [ 77.099430][ T4969] total_workingset_refault_file 3 [ 77.104551][ T4969] total_swap 237568 [ 77.108353][ T4969] total_swapcached 36864 [ 77.113397][ T4969] total_pgpgin 3858 [ 77.117286][ T4969] total_pgpgout 3848 [ 77.121345][ T4969] total_pgfault 8807 [ 77.125336][ T4969] total_pgmajfault 217 [ 77.129418][ T4969] total_inactive_anon 0 [ 77.133599][ T4969] total_active_anon 0 [ 77.137570][ T4969] total_inactive_file 4096 [ 77.142761][ T4969] total_active_file 0 [ 77.147069][ T4969] total_unevictable 0 [ 77.151053][ T4969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4969,uid=0 [ 77.166553][ T4969] Memory cgroup out of memory: Killed process 4969 (syz-executor.5) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 77.292418][ T4990] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 77.303784][ T4990] CPU: 0 PID: 4990 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 77.314129][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 77.324189][ T4990] Call Trace: [ 77.327464][ T4990] [ 77.330396][ T4990] dump_stack_lvl+0xda/0x130 [ 77.335238][ T4990] dump_stack+0x15/0x20 [ 77.339576][ T4990] dump_header+0x82/0x2d0 [ 77.343912][ T4990] oom_kill_process+0x33a/0x4c0 [ 77.348811][ T4990] out_of_memory+0x9ca/0xbf0 [ 77.353536][ T4990] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 77.359709][ T4990] mem_cgroup_out_of_memory+0x139/0x190 [ 77.365258][ T4990] try_charge_memcg+0x75c/0xd30 [ 77.370157][ T4990] ? __swap_duplicate+0x29b/0x2b0 [ 77.375178][ T4990] ? radix_tree_lookup+0xf9/0x150 [ 77.380249][ T4990] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 77.386360][ T4990] __read_swap_cache_async+0x2f6/0x550 [ 77.392092][ T4990] swap_cluster_readahead+0x27c/0x4c0 [ 77.397514][ T4990] swapin_readahead+0xe9/0x7f0 [ 77.402279][ T4990] ? __filemap_get_folio+0x41a/0x5a0 [ 77.407570][ T4990] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 77.413334][ T4990] ? swap_cache_get_folio+0x6e/0x200 [ 77.418868][ T4990] do_swap_page+0x4a0/0x1670 [ 77.423594][ T4990] ? cgroup_rstat_updated+0x8c/0x1c0 [ 77.428958][ T4990] ? __rcu_read_lock+0x35/0x50 [ 77.433728][ T4990] ? pte_offset_map_nolock+0x124/0x1d0 [ 77.439192][ T4990] handle_mm_fault+0xa36/0x2dd0 [ 77.444044][ T4990] exc_page_fault+0x3ff/0x6c0 [ 77.448719][ T4990] asm_exc_page_fault+0x26/0x30 [ 77.453630][ T4990] RIP: 0033:0x7f3338c34ce4 [ 77.458039][ T4990] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 77.477740][ T4990] RSP: 002b:00007ffc9aa5c3c0 EFLAGS: 00010206 [ 77.483801][ T4990] RAX: 0000000000000000 RBX: 00007f3338d99f80 RCX: 0000000000000000 [ 77.491906][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557513788 [ 77.500006][ T4990] RBP: 00007f3338d9b980 R08: 0000000000000000 R09: 00007ffc9abf80b0 [ 77.507982][ T4990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013003 [ 77.515953][ T4990] R13: ffffffffffffffff R14: 00007f33387fe000 R15: 0000000000012cc2 [ 77.523979][ T4990] [ 77.527202][ T4990] memory: usage 307156kB, limit 307200kB, failcnt 2431 [ 77.534070][ T4990] memory+swap: usage 307324kB, limit 9007199254740988kB, failcnt 0 [ 77.542105][ T4990] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 77.549530][ T4990] Memory cgroup stats for /syz3: [ 77.549655][ T4990] cache 20480 [ 77.557984][ T4990] rss 8192 [ 77.561013][ T4990] shmem 0 [ 77.564105][ T4990] mapped_file 0 [ 77.567563][ T4990] dirty 12288 [ 77.570846][ T4990] writeback 8192 [ 77.574636][ T4990] workingset_refault_anon 491 [ 77.579311][ T4990] workingset_refault_file 10 [ 77.583941][ T4990] swap 180224 [ 77.587306][ T4990] swapcached 8192 [ 77.590929][ T4990] pgpgin 4939 [ 77.594242][ T4990] pgpgout 4932 [ 77.597745][ T4990] pgfault 10604 [ 77.601418][ T4990] pgmajfault 183 [ 77.605222][ T4990] inactive_anon 0 [ 77.608948][ T4990] active_anon 8192 [ 77.612681][ T4990] inactive_file 12288 [ 77.616692][ T4990] active_file 8192 [ 77.620468][ T4990] unevictable 0 [ 77.623965][ T4990] hierarchical_memory_limit 314572800 [ 77.629373][ T4990] hierarchical_memsw_limit 9223372036854771712 [ 77.635549][ T4990] total_cache 20480 [ 77.639359][ T4990] total_rss 8192 [ 77.642912][ T4990] total_shmem 0 [ 77.646434][ T4990] total_mapped_file 0 [ 77.650409][ T4990] total_dirty 12288 [ 77.654237][ T4990] total_writeback 8192 [ 77.658395][ T4990] total_workingset_refault_anon 491 [ 77.663703][ T4990] total_workingset_refault_file 10 [ 77.668837][ T4990] total_swap 180224 [ 77.672662][ T4990] total_swapcached 8192 [ 77.677113][ T4990] total_pgpgin 4939 [ 77.681105][ T4990] total_pgpgout 4932 [ 77.685639][ T4990] total_pgfault 10604 [ 77.689919][ T4990] total_pgmajfault 183 09:25:45 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(0x0, 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:45 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:45 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r8 = syz_io_uring_complete(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = pidfd_getfd(r2, r3, 0x0) r11 = pidfd_getfd(r4, r3, 0x0) r12 = fsmount(r2, 0x0, 0x8) r13 = syz_io_uring_complete(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r10, r1, r11, r2, r12, r13], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r14 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r15, 0xfffffffd, '\x00', r16, r10, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r14, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r16, 0x25, r13, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 77.694128][ T4990] total_inactive_anon 0 [ 77.698298][ T4990] total_active_anon 8192 [ 77.704282][ T4990] total_inactive_file 12288 [ 77.710062][ T4990] total_active_file 8192 [ 77.714344][ T4990] total_unevictable 0 [ 77.718569][ T4990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=4990,uid=0 09:25:45 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:45 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) [ 77.733981][ T4990] Memory cgroup out of memory: Killed process 4990 (syz-executor.3) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 09:25:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:45 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) [ 78.046787][ T4994] ================================================================== [ 78.054925][ T4994] BUG: KCSAN: data-race in drain_all_stock / try_charge_memcg [ 78.062416][ T4994] [ 78.064746][ T4994] write to 0xffff888237c2a3c0 of 4 bytes by task 5013 on cpu 0: [ 78.072389][ T4994] try_charge_memcg+0xb49/0xd30 [ 78.077247][ T4994] obj_cgroup_charge_pages+0xab/0x130 [ 78.082624][ T4994] __memcg_kmem_charge_page+0x9c/0x170 [ 78.088096][ T4994] __alloc_pages+0x1bb/0x340 [ 78.092691][ T4994] bpf_ringbuf_alloc+0xba/0x2f0 [ 78.097554][ T4994] ringbuf_map_alloc+0x167/0x1d0 [ 78.102509][ T4994] map_create+0x713/0xa40 [ 78.106948][ T4994] __sys_bpf+0x62a/0x780 [ 78.111213][ T4994] __x64_sys_bpf+0x43/0x50 [ 78.115643][ T4994] do_syscall_64+0x44/0x110 [ 78.120221][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 78.126124][ T4994] [ 78.128481][ T4994] read to 0xffff888237c2a3c0 of 4 bytes by task 4994 on cpu 1: [ 78.136043][ T4994] drain_all_stock+0xd3/0x2d0 [ 78.141085][ T4994] try_charge_memcg+0x6c5/0xd30 [ 78.146045][ T4994] obj_cgroup_charge_pages+0xab/0x130 [ 78.151437][ T4994] __memcg_kmem_charge_page+0x9c/0x170 [ 78.157176][ T4994] __alloc_pages+0x1bb/0x340 [ 78.161808][ T4994] bpf_ringbuf_alloc+0xba/0x2f0 [ 78.166777][ T4994] ringbuf_map_alloc+0x167/0x1d0 [ 78.171726][ T4994] map_create+0x713/0xa40 [ 78.176083][ T4994] __sys_bpf+0x62a/0x780 [ 78.180516][ T4994] __x64_sys_bpf+0x43/0x50 [ 78.184960][ T4994] do_syscall_64+0x44/0x110 [ 78.189516][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 78.195439][ T4994] [ 78.197825][ T4994] value changed: 0x00000005 -> 0x00000036 [ 78.203552][ T4994] [ 78.205874][ T4994] Reported by Kernel Concurrency Sanitizer on: [ 78.212048][ T4994] CPU: 1 PID: 4994 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 78.222600][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 78.232670][ T4994] ================================================================== [ 78.251099][ T4993] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 78.262456][ T4993] CPU: 0 PID: 4993 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 78.273151][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 78.283226][ T4993] Call Trace: [ 78.286574][ T4993] [ 78.289684][ T4993] dump_stack_lvl+0xda/0x130 [ 78.294386][ T4993] dump_stack+0x15/0x20 [ 78.298588][ T4993] dump_header+0x82/0x2d0 [ 78.302942][ T4993] oom_kill_process+0x33a/0x4c0 [ 78.307832][ T4993] out_of_memory+0x9ca/0xbf0 [ 78.312515][ T4993] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 78.319037][ T4993] mem_cgroup_out_of_memory+0x139/0x190 [ 78.327800][ T4993] try_charge_memcg+0x75c/0xd30 [ 78.332980][ T4993] ? __swap_duplicate+0x29b/0x2b0 [ 78.338687][ T4993] ? radix_tree_lookup+0xf9/0x150 [ 78.344274][ T4993] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 78.350634][ T4993] __read_swap_cache_async+0x2f6/0x550 [ 78.356548][ T4993] swap_cluster_readahead+0x27c/0x4c0 [ 78.362489][ T4993] swapin_readahead+0xe9/0x7f0 [ 78.367549][ T4993] ? __filemap_get_folio+0x41a/0x5a0 [ 78.373131][ T4993] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 78.379101][ T4993] ? swap_cache_get_folio+0x6e/0x200 [ 78.384602][ T4993] do_swap_page+0x4a0/0x1670 [ 78.389323][ T4993] ? cgroup_rstat_updated+0x8c/0x1c0 [ 78.394658][ T4993] ? __rcu_read_lock+0x35/0x50 [ 78.399436][ T4993] ? pte_offset_map_nolock+0x124/0x1d0 [ 78.405079][ T4993] handle_mm_fault+0xa36/0x2dd0 [ 78.409952][ T4993] exc_page_fault+0x3ff/0x6c0 [ 78.414811][ T4993] asm_exc_page_fault+0x26/0x30 [ 78.420132][ T4993] RIP: 0033:0x7f1f0c21fce4 [ 78.424569][ T4993] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 78.444331][ T4993] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 78.450403][ T4993] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 78.458474][ T4993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 78.466517][ T4993] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 78.474592][ T4993] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000132b4 [ 78.482654][ T4993] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000012f73 [ 78.490681][ T4993] [ 78.494066][ T4993] memory: usage 307200kB, limit 307200kB, failcnt 5206 [ 78.501535][ T4993] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 78.509529][ T4993] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 78.519029][ T4993] Memory cgroup stats for /syz5: [ 78.528552][ T4993] cache 4096 [ 78.536832][ T4993] rss 8192 [ 78.539910][ T4993] shmem 0 [ 78.542835][ T4993] mapped_file 0 [ 78.546322][ T4993] dirty 4096 [ 78.549546][ T4993] writeback 8192 [ 78.553096][ T4993] workingset_refault_anon 692 [ 78.557769][ T4993] workingset_refault_file 3 [ 78.562352][ T4993] swap 237568 [ 78.565675][ T4993] swapcached 8192 [ 78.569386][ T4993] pgpgin 3912 [ 78.572666][ T4993] pgpgout 3907 [ 78.576049][ T4993] pgfault 8926 [ 78.579412][ T4993] pgmajfault 226 [ 78.582940][ T4993] inactive_anon 0 [ 78.586717][ T4993] active_anon 0 [ 78.590154][ T4993] inactive_file 4096 [ 78.594050][ T4993] active_file 0 [ 78.597661][ T4993] unevictable 0 [ 78.601213][ T4993] hierarchical_memory_limit 314572800 [ 78.606703][ T4993] hierarchical_memsw_limit 9223372036854771712 [ 78.612848][ T4993] total_cache 4096 [ 78.616838][ T4993] total_rss 8192 [ 78.620549][ T4993] total_shmem 0 [ 78.624033][ T4993] total_mapped_file 0 [ 78.628023][ T4993] total_dirty 4096 [ 78.631780][ T4993] total_writeback 8192 [ 78.635867][ T4993] total_workingset_refault_anon 692 [ 78.641061][ T4993] total_workingset_refault_file 3 [ 78.646314][ T4993] total_swap 237568 [ 78.650122][ T4993] total_swapcached 8192 [ 78.654293][ T4993] total_pgpgin 3912 [ 78.658111][ T4993] total_pgpgout 3907 [ 78.661983][ T4993] total_pgfault 8926 [ 78.665959][ T4993] total_pgmajfault 226 [ 78.670174][ T4993] total_inactive_anon 0 [ 78.674355][ T4993] total_active_anon 0 [ 78.678327][ T4993] total_inactive_file 4096 [ 78.682722][ T4993] total_active_file 0 [ 78.686739][ T4993] total_unevictable 0 [ 78.690712][ T4993] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4993,uid=0 [ 78.705927][ T4993] Memory cgroup out of memory: Killed process 4993 (syz-executor.5) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:46 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:46 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, r13, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:46 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) 09:25:46 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r5, r3, 0x0) r13 = fsmount(r2, 0x0, 0x8) r14 = syz_io_uring_complete(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, 0xffffffffffffffff, r1, r12, r2, r13, r14], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 09:25:46 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r7 = syz_io_uring_complete(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:46 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:46 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:46 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:46 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:46 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:46 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) [ 79.332730][ T5033] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.344203][ T5033] CPU: 1 PID: 5033 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 79.354530][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 79.364683][ T5033] Call Trace: [ 79.367985][ T5033] [ 79.370938][ T5033] dump_stack_lvl+0xda/0x130 [ 79.375782][ T5033] dump_stack+0x15/0x20 [ 79.379955][ T5033] dump_header+0x82/0x2d0 [ 79.384346][ T5033] oom_kill_process+0x33a/0x4c0 [ 79.389421][ T5033] out_of_memory+0x9ca/0xbf0 [ 79.394021][ T5033] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 79.400098][ T5033] mem_cgroup_out_of_memory+0x139/0x190 [ 79.405695][ T5033] try_charge_memcg+0x75c/0xd30 [ 79.410545][ T5033] ? __swap_duplicate+0x29b/0x2b0 [ 79.415632][ T5033] ? radix_tree_lookup+0xf9/0x150 [ 79.420753][ T5033] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 79.426819][ T5033] __read_swap_cache_async+0x2f6/0x550 [ 79.432300][ T5033] swap_cluster_readahead+0x27c/0x4c0 [ 79.437729][ T5033] swapin_readahead+0xe9/0x7f0 [ 79.442481][ T5033] ? __filemap_get_folio+0x41a/0x5a0 [ 79.447853][ T5033] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 79.453490][ T5033] ? swap_cache_get_folio+0x6e/0x200 [ 79.458885][ T5033] do_swap_page+0x4a0/0x1670 [ 79.463607][ T5033] ? cgroup_rstat_updated+0x8c/0x1c0 [ 79.468983][ T5033] ? __rcu_read_lock+0x35/0x50 [ 79.473845][ T5033] ? pte_offset_map_nolock+0x124/0x1d0 [ 79.479303][ T5033] handle_mm_fault+0xa36/0x2dd0 [ 79.484190][ T5033] exc_page_fault+0x3ff/0x6c0 [ 79.488953][ T5033] asm_exc_page_fault+0x26/0x30 [ 79.493825][ T5033] RIP: 0033:0x7f1f0c2910a3 [ 79.498274][ T5033] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 4e 5e 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 79.518047][ T5033] RSP: 002b:00007ffc4034ee78 EFLAGS: 00010293 [ 79.524187][ T5033] RAX: 00000000fffffffa RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 79.532273][ T5033] RDX: 00007ffc4034ee90 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.540357][ T5033] RBP: 00007f1f0c386980 R08: 0000000000000010 R09: 00007ffc403d00b0 [ 79.548561][ T5033] R10: 0000000000000000 R11: 000000000000359a R12: 0000000000013798 [ 79.556838][ T5033] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000013457 [ 79.565126][ T5033] [ 79.568309][ T5033] memory: usage 307200kB, limit 307200kB, failcnt 5651 [ 79.575754][ T5033] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 79.583813][ T5033] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 79.591314][ T5033] Memory cgroup stats for /syz5: [ 79.591544][ T5033] cache 4096 [ 79.600225][ T5033] rss 8192 [ 79.603512][ T5033] shmem 0 [ 79.606498][ T5033] mapped_file 0 [ 79.609986][ T5033] dirty 4096 [ 79.613326][ T5033] writeback 4096 [ 79.617335][ T5033] workingset_refault_anon 724 [ 79.622140][ T5033] workingset_refault_file 3 [ 79.626971][ T5033] swap 225280 [ 79.630539][ T5033] swapcached 32768 [ 79.634438][ T5033] pgpgin 3971 [ 79.638745][ T5033] pgpgout 3962 [ 79.642244][ T5033] pgfault 9071 [ 79.645772][ T5033] pgmajfault 234 [ 79.649355][ T5033] inactive_anon 16384 [ 79.653415][ T5033] active_anon 0 [ 79.656937][ T5033] inactive_file 0 [ 79.660611][ T5033] active_file 4096 [ 79.664463][ T5033] unevictable 0 [ 79.667917][ T5033] hierarchical_memory_limit 314572800 [ 79.673309][ T5033] hierarchical_memsw_limit 9223372036854771712 [ 79.679469][ T5033] total_cache 4096 [ 79.683363][ T5033] total_rss 8192 [ 79.686947][ T5033] total_shmem 0 [ 79.690691][ T5033] total_mapped_file 0 [ 79.694747][ T5033] total_dirty 4096 [ 79.698562][ T5033] total_writeback 4096 [ 79.702710][ T5033] total_workingset_refault_anon 724 [ 79.709191][ T5033] total_workingset_refault_file 3 [ 79.714616][ T5033] total_swap 225280 [ 79.718467][ T5033] total_swapcached 32768 [ 79.723163][ T5033] total_pgpgin 3971 [ 79.729399][ T5033] total_pgpgout 3962 [ 79.733504][ T5033] total_pgfault 9071 [ 79.737422][ T5033] total_pgmajfault 234 [ 79.741571][ T5033] total_inactive_anon 16384 [ 79.746109][ T5033] total_active_anon 0 [ 79.750110][ T5033] total_inactive_file 0 [ 79.754355][ T5033] total_active_file 4096 [ 79.758599][ T5033] total_unevictable 0 [ 79.762603][ T5033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5033,uid=0 [ 79.777910][ T5033] Memory cgroup out of memory: Killed process 5033 (syz-executor.5) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:47 executing program 4: syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:47 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:47 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r7 = syz_io_uring_complete(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:47 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:47 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) syz_io_uring_complete(r7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)) pidfd_getfd(r5, r3, 0x0) fsmount(r2, 0x0, 0x8) syz_io_uring_complete(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 09:25:47 executing program 4: syz_open_dev$loop(0x0, 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:47 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:47 executing program 4: syz_open_dev$loop(0x0, 0x8, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:47 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x58) 09:25:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) 09:25:47 executing program 0: syz_clone3(0x0, 0x0) 09:25:47 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x200080) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:47 executing program 0: syz_clone3(0x0, 0x0) 09:25:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r4 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r5, 0x0) r6 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r7 = getpgrp(r4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r7, r4, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r1}) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r9}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r6}) [ 80.384905][ T5066] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 80.396386][ T5066] CPU: 0 PID: 5066 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 80.407548][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 80.417671][ T5066] Call Trace: [ 80.420963][ T5066] [ 80.423901][ T5066] dump_stack_lvl+0xda/0x130 [ 80.428517][ T5066] dump_stack+0x15/0x20 [ 80.432767][ T5066] dump_header+0x82/0x2d0 [ 80.437119][ T5066] oom_kill_process+0x33a/0x4c0 [ 80.442171][ T5066] out_of_memory+0x9ca/0xbf0 [ 80.446803][ T5066] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 80.452904][ T5066] mem_cgroup_out_of_memory+0x139/0x190 [ 80.458466][ T5066] try_charge_memcg+0x75c/0xd30 [ 80.463327][ T5066] ? __swap_duplicate+0x29b/0x2b0 [ 80.468404][ T5066] ? radix_tree_lookup+0xf9/0x150 [ 80.473455][ T5066] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 80.479604][ T5066] __read_swap_cache_async+0x2f6/0x550 [ 80.485083][ T5066] swap_cluster_readahead+0x27c/0x4c0 [ 80.490524][ T5066] swapin_readahead+0xe9/0x7f0 [ 80.495338][ T5066] ? __filemap_get_folio+0x41a/0x5a0 [ 80.500673][ T5066] ? __mod_memcg_lruvec_state+0xd4/0x140 [ 80.506332][ T5066] ? swap_cache_get_folio+0x6e/0x200 [ 80.511636][ T5066] do_swap_page+0x4a0/0x1670 [ 80.516235][ T5066] ? cgroup_rstat_updated+0x8c/0x1c0 [ 80.521604][ T5066] ? __rcu_read_lock+0x35/0x50 [ 80.526388][ T5066] ? pte_offset_map_nolock+0x124/0x1d0 [ 80.531861][ T5066] handle_mm_fault+0xa36/0x2dd0 [ 80.536847][ T5066] exc_page_fault+0x3ff/0x6c0 [ 80.541579][ T5066] asm_exc_page_fault+0x26/0x30 [ 80.546531][ T5066] RIP: 0033:0x7f1f0c21fce4 [ 80.550997][ T5066] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 80.570851][ T5066] RSP: 002b:00007ffc4034eec0 EFLAGS: 00010206 [ 80.576927][ T5066] RAX: 0000000000000000 RBX: 00007f1f0c384f80 RCX: 0000000000000000 [ 80.584966][ T5066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556807788 [ 80.593027][ T5066] RBP: 00007f1f0c386980 R08: 0000000000000000 R09: 00007ffc403d00b0 [ 80.601160][ T5066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013baa [ 80.609139][ T5066] R13: ffffffffffffffff R14: 00007f1f0bde9000 R15: 0000000000013869 [ 80.617430][ T5066] [ 80.620641][ T5066] memory: usage 307196kB, limit 307200kB, failcnt 5944 [ 80.627769][ T5066] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 80.635815][ T5066] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 80.643217][ T5066] Memory cgroup stats for /syz5: [ 80.650058][ T5066] cache 4096 [ 80.658277][ T5066] rss 8192 [ 80.661308][ T5066] shmem 0 [ 80.664298][ T5066] mapped_file 0 [ 80.667789][ T5066] dirty 4096 [ 80.670991][ T5066] writeback 8192 [ 80.674566][ T5066] workingset_refault_anon 749 [ 80.679677][ T5066] workingset_refault_file 3 [ 80.684204][ T5066] swap 294912 [ 80.687483][ T5066] swapcached 12288 [ 80.691292][ T5066] pgpgin 4024 [ 80.694653][ T5066] pgpgout 4020 [ 80.698063][ T5066] pgfault 9178 [ 80.701495][ T5066] pgmajfault 246 [ 80.705157][ T5066] inactive_anon 4096 [ 80.709045][ T5066] active_anon 0 [ 80.712557][ T5066] inactive_file 0 [ 80.716287][ T5066] active_file 4096 [ 80.720001][ T5066] unevictable 0 [ 80.723476][ T5066] hierarchical_memory_limit 314572800 [ 80.728862][ T5066] hierarchical_memsw_limit 9223372036854771712 [ 80.735035][ T5066] total_cache 4096 [ 80.738842][ T5066] total_rss 8192 [ 80.742379][ T5066] total_shmem 0 [ 80.745872][ T5066] total_mapped_file 0 [ 80.749849][ T5066] total_dirty 4096 [ 80.753606][ T5066] total_writeback 8192 [ 80.757673][ T5066] total_workingset_refault_anon 749 [ 80.763024][ T5066] total_workingset_refault_file 3 [ 80.768042][ T5066] total_swap 294912 [ 80.771899][ T5066] total_swapcached 12288 [ 80.776287][ T5066] total_pgpgin 4024 [ 80.780227][ T5066] total_pgpgout 4020 [ 80.784544][ T5066] total_pgfault 9178 [ 80.788450][ T5066] total_pgmajfault 246 [ 80.792809][ T5066] total_inactive_anon 4096 [ 80.797511][ T5066] total_active_anon 0 [ 80.801717][ T5066] total_inactive_file 0 [ 80.806221][ T5066] total_active_file 4096 [ 80.810592][ T5066] total_unevictable 0 [ 80.814953][ T5066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5066,uid=0 09:25:48 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r7 = syz_io_uring_complete(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) [ 80.830465][ T5066] Memory cgroup out of memory: Killed process 5066 (syz-executor.5) total-vm:49640kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 09:25:48 executing program 0: syz_clone3(0x0, 0x0) 09:25:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:48 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r9 = syz_io_uring_complete(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r12 = pidfd_getfd(r2, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r11, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r12, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) 09:25:48 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:48 executing program 3: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r5 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r6) mq_getsetattr(r5, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) syz_io_uring_complete(r7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r4, r5, 0x2, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)) pidfd_getfd(r5, r3, 0x0) fsmount(r2, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 09:25:48 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:48 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:25:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:48 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{&(0x7f0000000140)="626beada8c74071d1dc9d509adfd446482aee00161d42787426ebf1e54ece2be67d8e547dcb7fe6e42c925fea930cbf12833aabdecf358212e8f", 0x3a, 0x3}, {&(0x7f0000000180)="122dd6d61ffc1f29212fabd2ed051fe4acf50e626f206592eba3d3d4c006ed2fb4fc606a795cebdac0fd061198a5656c884eb869de45fa00ffb00cf05817566e2418a1943f6d8393b8c6c78bdb42561911e6450cf6ed72cfa5b0fab31a76b3d6e31e2ca4ff388ee4bba71bd8a22379209ca7358ecc70b3d01c73b6778f9d17d7f833a9fa69d651ff71bc325d9d108d3e9bcf8e3777398aba8aebce7c3999de42cdee3a091be692712651d078c51818ad67d02739f20047249b52e7a31fa04b4c42e01346ad46dfb1ee2f590ef9afecedd74e8dce26", 0xd5}, {&(0x7f0000000280)="cecc7bc49bb21a1cab10d10ae85f42bd51775e3588412c41c6a319ff45068513fd35721bbf1df5359d33a60756b93b02db596a877866eb4bc43ee2014db382c33824b7f3c2db36f6e7638121e0de8deffdd326b9d1e5ddcee131e8a6aa16f81756327bbef7b9edf02a2fd828f56b4cc417e1fe1ed9b7ec84dac12439ffa96032b736fd37a4d66f25c989b7ff31d2d8b2e20b1c390376", 0x96, 0x3}, {&(0x7f0000000340)="8e69f6bf1b38b239abff1fec2f7d5f739e91e74ad2241c807e78b4e6efd2c92d4db65162fe03b2735025ca36c5457cc2e2b7385927ebeddaaafcbbd4d4ea3df857beb89c9023b7e96667984f4d5e1e1777ecb159b83ae254d7ff58734809e2086d42312c965bd2b4d592", 0x6a, 0x2}, {&(0x7f00000003c0)="9f1dc89e787b51a5a1ef29b3c511bfa624756e6560ea701cb03cb0022790a13931b9e069c2a3168e506187", 0x2b, 0x1}, {&(0x7f0000000400)="fb9384240c4c3e35309b554ad4463f88b9c3d5ccb4d294fb9b0bdc7811fcdacfdec1b5034a8b9ded875be996f4fb6f36de9f729a2a0fd5f5f8b30baefbf0d00becaf7f16642c0c9913f7d4b7b42d8bd3f2d8c5e196077ca47dd3420c53f21302a9d4dd36f2dd225f9d6032b3385c0b104446d3ce97b6327b8940a8b03944403fc23228", 0x83, 0x3}]}, 0x6, 0x3}, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) 09:25:48 executing program 0: syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 81.477892][ T5092] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 81.490045][ T5092] CPU: 1 PID: 5092 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00303-g3f82f1c3a036 #0 [ 81.500398][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 81.510595][ T5092] Call Trace: [ 81.513877][ T5092] [ 81.516862][ T5092] dump_stack_lvl+0xda/0x130 [ 81.521562][ T5092] dump_stack+0x15/0x20 [ 81.526949][ T5092] dump_header+0x82/0x2d0 [ 81.531457][ T5092] oom_kill_process+0x33a/0x4c0 [ 81.536381][ T5092] out_of_memory+0x9ca/0xbf0 [ 81.540979][ T5092] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 81.547080][ T5092] mem_cgroup_out_of_memory+0x139/0x190 [ 81.552623][ T5092] try_charge_memcg+0x75c/0xd30 [ 81.557555][ T5092] ? __swap_duplicate+0x29b/0x2b0 [ 81.562790][ T5092] ? radix_tree_lookup+0xf9/0x150 [ 81.567842][ T5092] mem_cgroup_swapin_charge_folio+0x107/0x190 [ 81.574001][ T5092] __read_swap_cache_async+0x2f6/0x550 [ 81.579453][ T5092] swap_cluster_readahead+0x27c/0x4c0 [ 81.584929][ T5092] swapin_readahead+0xe9/0x7f0 [ 81.589864][ T5092] ? __filemap_get_folio+0x41a/0x5a0 [ 81.595139][ T5092] ? swap_cache_get_folio+0x6e/0x200 [ 81.600416][ T5092] do_swap_page+0x4a0/0x1670 [ 81.605073][ T5092] ? __rcu_read_lock+0x35/0x50 [ 81.609941][ T5092] ? pte_offset_map_nolock+0x124/0x1d0 [ 81.615412][ T5092] handle_mm_fault+0xa36/0x2dd0 [ 81.620270][ T5092] exc_page_fault+0x3ff/0x6c0 [ 81.625180][ T5092] asm_exc_page_fault+0x26/0x30 [ 81.630179][ T5092] RIP: 0033:0x7f3338c34ce4 [ 81.634591][ T5092] Code: 01 00 00 69 3d c9 e9 c8 00 e8 03 00 00 48 8d 1d b2 52 16 00 e8 9d 5f 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 f7 ee ff ff eb [ 81.654470][ T5092] RSP: 002b:00007ffc9aa5c3c0 EFLAGS: 00010206 [ 81.660586][ T5092] RAX: 0000000000000000 RBX: 00007f3338d99f80 RCX: 0000000000000000 [ 81.668565][ T5092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555557513788 [ 81.676624][ T5092] RBP: 00007f3338d9b980 R08: 0000000000000000 R09: 00007ffc9abf80b0 [ 81.684597][ T5092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013fbc [ 81.692656][ T5092] R13: ffffffffffffffff R14: 00007f33387fe000 R15: 0000000000013c7b [ 81.700684][ T5092] [ 81.703813][ T5092] memory: usage 307200kB, limit 307200kB, failcnt 2937 [ 81.710670][ T5092] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 81.718933][ T5092] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 09:25:49 executing program 2: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, 0xffffffffffffffff) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd220, 0x1, 0x1, 0x301, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000900)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x5, &(0x7f0000000880)="ae1e2e8e3894382d94c70040ecd0fee19ec005a2eae406cb9eff73085be7e7224f51efdb0ca2a5b480b0720aab4ca5ab4f414e85f97d3c9fbd100aaeac798aa1fddb8e0d4b0e63d8836b03f18a7449efe3638dd8a72ad189dd047bf8d988da168c0212fde3750cea92a1b4c93f6c183e2fbb", 0x72}) r7 = syz_io_uring_complete(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r9 = pidfd_getfd(r2, r3, 0x0) r10 = pidfd_getfd(r4, r3, 0x0) r11 = fsmount(r2, 0x0, 0x8) r12 = syz_io_uring_complete(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x18, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @ldst={0x3, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3ab3}, @generic={0x8d, 0x0, 0x5, 0x5, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', r8, 0x25, r2, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x5d6c, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r9, r1, r10, r2, r11, r12], &(0x7f0000000bc0)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x4, 0x2, 0xa, 0x3}], 0x10, 0x1ff}, 0x90) r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xb, 0x3, 0x3, 0x40, 0xd0, r14, 0xfffffffd, '\x00', r15, r9, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'}) pidfd_send_signal(r13, 0x14, &(0x7f0000000e80)={0x31, 0xfff, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1d, &(0x7f0000002000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xccbb}, {}, {}, [@map_val={0x18, 0xb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x48, '\x00', r15, 0x25, r12, 0x8, &(0x7f0000003100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xc, 0x81, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000003180)=[{0x0, 0x3, 0xb, 0x2}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x92ef}, 0x90) 09:25:49 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x80) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18}) 09:25:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6771, 0x10040) read$usbmon(r0, &(0x7f0000000040)=""/29, 0x1d) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x6}) r2 = fsmount(r1, 0x0, 0x7d) r3 = fsmount(r2, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200080) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) r5 = syz_clone3(&(0x7f0000000780)={0x210200600, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x15}, &(0x7f00000005c0)=""/171, 0xab, &(0x7f0000000680)=""/142, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) process_mrelease(r6, 0x0) r7 = openat$incfs(r2, &(0x7f0000000800)='.log\x00', 0x801, 0x140) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000880)={0x1, 0x0, &(0x7f0000000840)=[r0, 0xffffffffffffffff]}, 0x2) r8 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r1, 0x0, 0x25, 0x1, @val=@iter={&(0x7f00000008c0)=@task={r8, r5, r2}, 0x10}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={r1}) r10 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000c00)={0x0, {}, 0x0, {}, 0x5, 0xa, 0xe, 0x8, "6d5dc3c671cfc97cebb0c4759b4f9e5c3736257f5dfb973016cea289c4a1ab899e74bd165aa57e2f991f0b4e8bed10ecc9a1366a2dc4eb24cb1be4b40ced8481", "4562f3890d1cea7755d0eaea5c6fb1ce72df92350a93600cf5ccbb727fa9798f", [0x8, 0x4]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000cc0)={r10}) io_uring_setup(0x3491, &(0x7f0000000d00)={0x0, 0x1ea3, 0x40, 0x2, 0x18, 0x0, r7}) [ 81.726407][ T5092] Memory cgroup stats for /syz3: [ 81.726547][ T5092] cache 16384 [ 81.734927][ T5092] rss 8192 [ 81.737995][ T5092] shmem 0 [ 81.741055][ T5092] mapped_file 0 [ 81.744687][ T5092] dirty 0 [ 81.747721][ T5092] writeback 8192 [ 81.751355][ T5092] workingset_refault_anon 641 [ 81.756154][ T5092] workingset_refault_file 11 [ 81.760790][ T5092] swap 176128 [ 81.764267][ T5092] swapcached 12288 [ 81.768166][ T5092] pgpgin 5198 [ 81.771456][ T5092] pgpgout 5191 [ 81.775033][ T5092] pgfault 11210 [ 81.778607][ T5092] pgmajfault 234 [ 81.782232][ T5092] inactive_anon 0 [ 81.785966][ T5092] active_anon 0 [ 81.789430][ T5092] inactive_file 12288 [ 81.793510][ T5092] active_file 4096 [ 81.797364][ T5092] unevictable 0 [ 81.800831][ T5092] hierarchical_memory_limit 314572800 [ 81.806580][ T5092] hierarchical_memsw_limit 9223372036854771712 [ 81.812916][ T5092] total_cache 16384 [ 81.816819][ T5092] total_rss 8192 [ 81.820371][ T5092] total_shmem 0 [ 81.823925][ T5092] total_mapped_file 0 [ 81.827903][ T5092] total_dirty 0 [ 81.831477][ T5092] total_writeback 8192 [ 81.835667][ T5092] total_workingset_refault_anon 641 [ 81.840861][ T5092] total_workingset_refault_file 11 [ 81.846106][ T5092] total_swap 176128 [ 81.849915][ T5092] total_swapcached 12288 [ 81.854372][ T5092] total_pgpgin 5198 [ 81.858385][ T5092] total_pgpgout 5191 [ 81.862279][ T5092] total_pgfault 11210 [ 81.866490][ T5092] total_pgmajfault 234 [ 81.870659][ T5092] total_inactive_anon 0 [ 81.874838][ T5092] total_active_anon 0 [ 81.878816][ T5092] total_inactive_file 12288 [ 81.883371][ T5092] total_active_file 4096 [ 81.887600][ T5092] total_unevictable 0 [ 81.891656][ T5092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5092,uid=0 [ 81.907046][ T5092] Memory cgroup out of memory: Killed process 5092 (syz-executor.3) total-vm:49640kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 09:25:49 executing program 5: r0 = mq_open(&(0x7f0000000000)='{&[f:--}&\\[()/@!/\x00', 0x800, 0x80, &(0x7f0000000040)={0xb43, 0xffff, 0x1000, 0x1}) mq_getsetattr(r0, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffffffffffffc, 0x7fff, 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x12, 0x4, 0x8, "197a4979e3690a0d95b49300024f10be028cc336a00482fa0ee0aed8cdff882115f97cb2d19d40bbd585bb99c8cfae8d1b66fee8a2ea21dfb6feb77bc4ad96e1", "2f1102db45cf76f0868869e9552dec8109f935cefaed48b2a2212676c6bb00af5825548a7e64292e99ed3b1ac0d5cc4f8626713f4b74051d2bb3edae8e0e6b99", "b5cbc376540c136f33d56f3d48b6b01791e5925b615bd6b215059cd1dacc3039", [0x0, 0x6]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x78c8, 0x20, 0xfff, 0x8000, {{0xa, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0x3, '['}, {0x0, 0xa, "9cc1f8fb6c649f6f"}]}]}}}}}) r4 = pidfd_getfd(r2, r0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000640)={&(0x7f0000001000)={[{&(0x7f0000000380)="5f3dd14e9dbf21ac0b45ec4f82a088179952ba0377fddf2217624efb3b5e410da213cb89aeedc3ff3dcd1a1699a8e6a0bc3cd261717e38f2588b10117ca2f064d92f7f3cac29afc5d8223bd766e7f521a2bb46e76ad78e682989de789b24ad4b3432bddef1859295c5d07a2026b716a31f967b4a33f1daaa48c4ea355862d9c4e02fe24d66a8a647dafba656821570ecaef2bef03c1cb985acc4ddb64640df1fd0da0f27eea5811d373a3db95867853538e9a156aff43cc84568cee41d", 0xbd, 0x3}, {&(0x7f0000000440)="1b49a5680806777c66ee0b8df296ec8ba353199523ce336ab0f80a6818249298590ffe605bb4881ca2ac4522ca898e422f7498b0ba89ee4807ed1f970938da8a557d090c61706299c0ec0007eea2421cbaebf4c41c8128a92c92cf6cd5153d9bf89d1d", 0x63, 0x2}, {&(0x7f00000004c0)="2b980ea3b63b8496da463fc75bdaa70272745a7dc2cf7c9699e68b4592c6b18836e2f8a9b221d4def98c5dbbdda26b9e0dbe610ccc53b77765d63e6d200082430562c5dd0acbeea5d31466a5b18a2fa8c330a7a56ebe19f749c795af341d7799fe7d398cd9355c012c342a768880cd8b207690dbf9e4347129fbc80bbd5e3faf8c79fe7c7d1ec0e6fea8b0b5cb64dbb3b1fa36bfad63f0e89a20278f604dc44ebaf9b6df9e2d6f21057f61b8561095eda44b322d", 0xb4, 0x3}, {&(0x7f0000000580)="d027e383cf5ac800daa1f2570796d58f26c7a1c64470183e84b7f08dc150a02504782909b52588c018d13f883a0da900445a8d842ae1d3b67955d294975ae4c84e8d1251f09327848603083b8da8801c097636b79094fb0a3435b29d780175d2ef3423f4ce2d9de875a3eb8263144e47588e03ef9e70577f81a4f60d97a6e29cede1796e1a4ef2d6a7e3e181ec893031c86202", 0x93}]}, 0x4, 0x3}, 0x1) socketpair(0x27, 0x4, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000680)='&:\x00', 0x0, r5) mq_getsetattr(r4, &(0x7f0000000700)={0x5, 0x6, 0x8}, &(0x7f0000000740)) syz_io_uring_setup(0x4527, &(0x7f0000000780)={0x0, 0xd2