executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x2, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:47:55 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1c, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:55 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:47:55 executing program 4: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:47:56 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x0, 0x2, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:47:56 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:47:56 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:47:56 executing program 1: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:47:56 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:57 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x0, 0x2, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:47:57 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:47:57 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1c, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:57 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x0, 0x2, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:47:57 executing program 2: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:47:57 executing program 0: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:47:58 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:47:58 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x24, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:58 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:47:58 executing program 4: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:47:58 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1c, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:59 executing program 1: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:47:59 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x0, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:47:59 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x24, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:47:59 executing program 4: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:47:59 executing program 0: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:48:00 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x0, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:00 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:00 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:48:00 executing program 0: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:48:00 executing program 4: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) 04:48:00 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:48:00 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x24, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:01 executing program 3: io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c}, &(0x7f0000000280), &(0x7f00000002c0)) 04:48:01 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x0, 0x58}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:01 executing program 1: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:48:01 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:01 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) [ 132.783074][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789426][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 04:48:02 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:02 executing program 4: io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c}, &(0x7f0000000280), &(0x7f00000002c0)) 04:48:02 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, 0x0, 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:02 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) 04:48:02 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:48:02 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:03 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:03 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 04:48:03 executing program 0: io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c}, &(0x7f0000000280), &(0x7f00000002c0)) 04:48:03 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, 0x0, 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:03 executing program 1: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:03 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:03 executing program 0: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00'}) 04:48:04 executing program 3: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, 0x0, &(0x7f00000002c0)) 04:48:04 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x27, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:04 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:04 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:05 executing program 3: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 04:48:05 executing program 4: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, 0x0, &(0x7f00000002c0)) 04:48:05 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, 0x0, 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:05 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:05 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:06 executing program 4: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 04:48:06 executing program 0: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, 0x0, &(0x7f00000002c0)) 04:48:06 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:06 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) 04:48:06 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x27, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:06 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:07 executing program 0: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 04:48:08 executing program 2: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), 0x0) 04:48:08 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:08 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:08 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:08 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x27, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:08 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:09 executing program 4: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), 0x0) 04:48:09 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:09 executing program 1: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:09 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:09 executing program 1: r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), 0x0) 04:48:09 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:09 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:09 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:10 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:11 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:11 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:11 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:11 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:12 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:12 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:12 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:13 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:13 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000006c0)) 04:48:13 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:13 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:14 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:14 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000006c0)) 04:48:14 executing program 4: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:15 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:15 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:15 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) 04:48:15 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:16 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) 04:48:16 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:16 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:16 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:17 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) 04:48:17 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:17 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:18 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:18 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 151.364271][ T7214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.696843][ T7214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.191396][ T7214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.331238][ T7214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.347512][ T6715] syz-executor.3 (6715) used greatest stack depth: 19160 bytes left [ 164.670949][ T7214] device hsr_slave_0 left promiscuous mode [ 164.706815][ T7214] device hsr_slave_1 left promiscuous mode [ 164.802838][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.810287][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.009003][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.041707][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.139282][ T7214] device bridge_slave_1 left promiscuous mode [ 165.153459][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.268338][ T7214] device bridge_slave_0 left promiscuous mode [ 165.289819][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.601948][ T7214] device veth1_macvtap left promiscuous mode [ 165.610750][ T7214] device veth0_macvtap left promiscuous mode [ 165.617053][ T7214] device veth1_vlan left promiscuous mode [ 165.650767][ T7214] device veth0_vlan left promiscuous mode 04:48:34 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x29, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r9 = gettid() r10 = getpgrp(0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') r12 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') r13 = syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x174, r8, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) syz_open_procfs$userns(r10, &(0x7f0000000e00)) r14 = syz_open_procfs$namespace(r10, &(0x7f0000000e40)='ns/net\x00') r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r16, 0x1b, r17, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r2, 0x0, 0x0, &(0x7f0000001400)=[0xffffffffffffffff, r18, r19, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:34 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:34 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000006c0)) 04:48:34 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:34 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:35 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:35 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:35 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000006c0)) 04:48:35 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:36 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:36 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:36 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000006c0)) 04:48:37 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:37 executing program 4: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:37 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000006c0)) 04:48:38 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:38 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, &(0x7f00000002c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:38 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 169.820577][ T3559] Bluetooth: hci0: command 0x0409 tx timeout 04:48:38 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:39 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000006c0)) 04:48:39 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:39 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:40 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:40 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:40 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000006c0)) [ 171.900527][ T3559] Bluetooth: hci0: command 0x041b tx timeout 04:48:41 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:41 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) 04:48:41 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:41 executing program 4: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:42 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:42 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:42 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) [ 173.990544][ T3559] Bluetooth: hci0: command 0x040f tx timeout 04:48:43 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:43 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:43 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) 04:48:44 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:44 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:44 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:44 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 175.820544][ T3580] Bluetooth: hci2: command 0x0406 tx timeout [ 175.830644][ T3559] Bluetooth: hci3: command 0x0406 tx timeout [ 175.837088][ T3559] Bluetooth: hci4: command 0x0406 tx timeout 04:48:45 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") [ 176.065091][ T3560] Bluetooth: hci0: command 0x0419 tx timeout 04:48:45 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 04:48:45 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:45 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:46 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:46 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 04:48:46 executing program 4: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:46 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:46 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:47 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:47 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:47 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 04:48:48 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:48 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:48 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:48 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:48 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:49 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:49 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:49 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:50 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:50 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:50 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:51 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:51 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:51 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:52 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:52 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:52 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:52 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:53 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:48:53 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:53 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:53 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) 04:48:54 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2", 0x8, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:54 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:54 executing program 4: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 185.156150][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 185.198730][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 185.397168][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.732345][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 04:48:55 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) [ 186.196761][ T7214] bond0 (unregistering): Released all slaves 04:48:55 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:48:56 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) 04:48:57 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e0", 0x1, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:57 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) 04:48:57 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:48:57 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:48:58 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) [ 189.306597][ T7520] chnl_net:caif_netlink_parms(): no params data found 04:48:58 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e0", 0x1, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:48:59 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:48:59 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:00 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:00 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:01 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:02 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:02 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:02 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") [ 194.225185][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231546][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 04:49:04 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:04 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:05 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:05 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:06 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:07 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) [ 198.540858][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.548592][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.601590][ T7520] device bridge_slave_0 entered promiscuous mode [ 198.653646][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.687210][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.716848][ T7520] device bridge_slave_1 entered promiscuous mode 04:49:08 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:08 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:09 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:09 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) [ 201.209838][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.265296][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.428225][ T21] Bluetooth: hci1: command 0x0406 tx timeout 04:49:10 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:10 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:10 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) [ 201.721772][ T7520] team0: Port device team_slave_0 added [ 201.730105][ T7520] team0: Port device team_slave_1 added 04:49:12 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) [ 205.080950][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.087929][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.216434][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.259838][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.284732][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.367707][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.763218][ T7520] device hsr_slave_0 entered promiscuous mode [ 206.772179][ T7520] device hsr_slave_1 entered promiscuous mode 04:49:19 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:19 executing program 4: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) 04:49:19 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:19 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:20 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:21 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:22 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:22 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:23 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:23 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:24 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:24 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:24 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") 04:49:25 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:25 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 216.707616][ T3561] Bluetooth: hci4: command 0x0409 tx timeout 04:49:25 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:27 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x0) 04:49:27 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:27 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 218.780465][ T3593] Bluetooth: hci4: command 0x041b tx timeout 04:49:28 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:28 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480), 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0x0) [ 220.363486][ T7214] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:49:29 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 220.861093][ T3558] Bluetooth: hci4: command 0x040f tx timeout 04:49:30 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:30 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:30 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:31 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 222.950547][ T3560] Bluetooth: hci4: command 0x0419 tx timeout 04:49:32 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:32 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x0, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 223.771872][ T7214] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:49:33 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:33 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:34 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:35 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x0, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:35 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) 04:49:36 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:36 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:36 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:37 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r9, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:37 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x0, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:38 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:38 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:38 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r9, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:39 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:39 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x0, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:39 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r9, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:40 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 231.354891][ T7214] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:49:40 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 231.807446][ T8080] chnl_net:caif_netlink_parms(): no params data found 04:49:41 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:41 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r7, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:42 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x0, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:42 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:42 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r7, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:43 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:43 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:44 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r7, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)) 04:49:44 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:44 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x0, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 235.990463][ T3593] Bluetooth: hci5: command 0x0409 tx timeout 04:49:45 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:45 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r6, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000900)) 04:49:46 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:46 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:46 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) 04:49:46 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) [ 238.070453][ T3593] Bluetooth: hci5: command 0x041b tx timeout 04:49:47 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:47 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:47 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) [ 238.785503][ T7214] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:49:48 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) 04:49:48 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 240.150597][ T3558] Bluetooth: hci5: command 0x040f tx timeout 04:49:49 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) 04:49:49 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 240.449962][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.475966][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.495366][ T8080] device bridge_slave_0 entered promiscuous mode [ 240.566305][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.603159][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.656955][ T8080] device bridge_slave_1 entered promiscuous mode 04:49:50 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:50 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:50 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 242.129927][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.230534][ T3558] Bluetooth: hci5: command 0x0419 tx timeout 04:49:51 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r4, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)) [ 242.303372][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:49:51 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:52 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:52 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:53 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r4, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)) 04:49:53 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 244.944786][ T8080] team0: Port device team_slave_0 added [ 244.976499][ T8080] team0: Port device team_slave_1 added 04:49:54 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:49:54 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:54 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:49:56 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:49:56 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:49:57 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:49:57 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 248.867442][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.910393][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.997326][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.043952][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.070387][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 04:49:58 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 249.152799][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.227452][ T8331] chnl_net:caif_netlink_parms(): no params data found 04:49:58 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) [ 249.590175][ T8080] device hsr_slave_0 entered promiscuous mode [ 249.602989][ T8080] device hsr_slave_1 entered promiscuous mode [ 249.620194][ T8080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.629922][ T8080] Cannot create hsr debugfs directory 04:49:59 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) [ 250.813761][ T8388] syz-executor.3 (8388) used greatest stack depth: 18232 bytes left 04:49:59 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:00 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:00 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:00 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:01 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:01 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:02 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:03 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:03 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:03 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) [ 255.663360][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669695][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 04:50:04 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:04 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:05 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:06 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r1, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:06 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 257.688389][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.696953][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.724478][ T8331] device bridge_slave_0 entered promiscuous mode 04:50:06 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 257.767691][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.787479][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.795629][ T8331] device bridge_slave_1 entered promiscuous mode 04:50:07 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) 04:50:08 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:08 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) 04:50:08 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:08 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x0, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 259.780968][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 04:50:09 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:10 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) [ 261.369299][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:50:10 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:10 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x0, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:11 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:11 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) 04:50:12 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:12 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:12 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 04:50:12 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x0, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:13 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:13 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 264.686869][ T8331] team0: Port device team_slave_0 added 04:50:13 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 265.142233][ T8331] team0: Port device team_slave_1 added 04:50:14 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:15 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:15 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 04:50:16 executing program 0: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:16 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:16 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 267.897743][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.925030][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.010339][ T8331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 04:50:17 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:17 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:18 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) [ 269.222378][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.229348][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 04:50:18 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 269.350348][ T8331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 04:50:19 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:19 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:20 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:20 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:21 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:22 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:22 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:22 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:23 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00)={0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:24 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r8 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r7, &(0x7f0000000640)=r8, 0x12) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:24 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:25 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 276.892779][ T8331] device hsr_slave_0 entered promiscuous mode 04:50:26 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) [ 277.264844][ T8331] device hsr_slave_1 entered promiscuous mode 04:50:26 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 277.708950][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.723574][ T8331] Cannot create hsr debugfs directory 04:50:27 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:28 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:28 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:29 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:30 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:30 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:31 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:31 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) write$cgroup_pid(r8, &(0x7f0000000bc0)=r9, 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 282.870509][ T3558] Bluetooth: hci0: command 0x0409 tx timeout 04:50:32 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r3], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r1, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:33 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:33 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 284.940487][ T3593] Bluetooth: hci0: command 0x041b tx timeout 04:50:34 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:34 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:35 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 287.020479][ T13] Bluetooth: hci0: command 0x040f tx timeout 04:50:36 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2], 0x1, 0x0, 0x1}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) [ 289.110648][ T1065] Bluetooth: hci0: command 0x0419 tx timeout [ 289.657130][ T7214] device hsr_slave_0 left promiscuous mode [ 290.829664][ T7214] device hsr_slave_1 left promiscuous mode [ 291.615840][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.624150][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.106230][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.126839][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.582026][ T7214] device bridge_slave_1 left promiscuous mode [ 292.588278][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.212885][ T7214] device bridge_slave_0 left promiscuous mode [ 293.219138][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state 04:50:42 executing program 0: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000800)=""/91) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) 04:50:42 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:42 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:43 executing program 3: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:45 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:45 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 296.501606][ T7214] device veth1_macvtap left promiscuous mode [ 296.507688][ T7214] device veth0_macvtap left promiscuous mode [ 296.540566][ T7214] device veth1_vlan left promiscuous mode [ 296.546414][ T7214] device veth0_vlan left promiscuous mode 04:50:46 executing program 2: syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 297.194258][ T1065] Bluetooth: hci2: command 0x0409 tx timeout 04:50:46 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:47 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 299.270379][ T3558] Bluetooth: hci2: command 0x041b tx timeout 04:50:48 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:49 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:50 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r3, &(0x7f0000000e00)) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000e40)='ns/net\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 301.340481][ T3560] Bluetooth: hci2: command 0x040f tx timeout 04:50:50 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 302.310433][ T3560] Bluetooth: hci4: command 0x0409 tx timeout 04:50:51 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:52 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 303.430417][ T3560] Bluetooth: hci2: command 0x0419 tx timeout 04:50:52 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 304.380368][ T3560] Bluetooth: hci4: command 0x041b tx timeout 04:50:54 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:54 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:55 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 306.460436][ T3558] Bluetooth: hci4: command 0x040f tx timeout 04:50:55 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:50:56 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:56 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x0) 04:50:56 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x0) [ 308.550401][ T1065] Bluetooth: hci4: command 0x0419 tx timeout 04:50:57 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:50:58 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:50:58 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x0) 04:50:59 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r4, 0x10000000) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:00 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:00 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:03 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:03 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x1407, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000000) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:04 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:05 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:05 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:06 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 317.104243][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.110613][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 04:51:07 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:07 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:08 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:08 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 319.802795][ T7214] team0 (unregistering): Port device team_slave_1 removed 04:51:09 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 320.715052][ T7214] team0 (unregistering): Port device team_slave_0 removed 04:51:10 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) io_uring_setup(0x72a0, &(0x7f0000000880)={0x0, 0xbf0b, 0x40, 0x3, 0x3ab, 0x0, r11}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 321.721383][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 04:51:10 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 322.967350][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 04:51:12 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:12 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:13 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:14 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$EVIOCGABS0(r11, 0x80184540, &(0x7f0000000800)=""/91) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:14 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:15 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:16 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:17 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 328.471225][ T7214] bond0 (unregistering): Released all slaves 04:51:17 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:18 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:19 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:19 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 330.989712][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 331.026681][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 331.089375][ T8901] chnl_net:caif_netlink_parms(): no params data found 04:51:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:21 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:22 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:23 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:24 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 336.423688][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.431091][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.483339][ T9019] device bridge_slave_0 entered promiscuous mode 04:51:25 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:25 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 336.946534][ T8280] syz-executor.3 (8280) used greatest stack depth: 17816 bytes left [ 337.153707][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.185500][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.213179][ T9019] device bridge_slave_1 entered promiscuous mode [ 337.774071][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.781282][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.789408][ T9056] device bridge_slave_0 entered promiscuous mode 04:51:26 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r11, 0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x1, 0x23456}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:29 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:30 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 341.488145][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.495749][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.536347][ T8901] device bridge_slave_0 entered promiscuous mode [ 341.590463][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.597551][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.630774][ T9056] device bridge_slave_1 entered promiscuous mode [ 341.657172][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 04:51:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:31 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(r10, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:32 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:33 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 344.214207][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:51:34 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 346.436651][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 04:51:35 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 349.023462][ T9019] team0: Port device team_slave_0 added [ 349.031847][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.078550][ T9019] team0: Port device team_slave_1 added [ 349.180378][ T3558] Bluetooth: hci0: command 0x0409 tx timeout 04:51:38 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:39 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 351.260408][ T1065] Bluetooth: hci0: command 0x041b tx timeout 04:51:41 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 352.462528][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.469626][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.555764][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.590661][ T9056] team0: Port device team_slave_0 added [ 352.606103][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.630614][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.700524][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.749080][ T9056] team0: Port device team_slave_1 added 04:51:41 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 353.340382][ T1065] Bluetooth: hci0: command 0x040f tx timeout 04:51:43 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:43 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 354.921784][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.928759][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.054074][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.100068][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.120341][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.191357][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.430392][ T3593] Bluetooth: hci0: command 0x0419 tx timeout 04:51:45 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:47 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:48 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:49 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:50 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 361.517876][ T9056] device hsr_slave_0 entered promiscuous mode [ 361.587654][ T9056] device hsr_slave_1 entered promiscuous mode [ 361.621240][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.628834][ T9056] Cannot create hsr debugfs directory [ 361.853760][ T9346] chnl_net:caif_netlink_parms(): no params data found 04:51:51 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:52 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 363.420401][ T3560] Bluetooth: hci2: command 0x0409 tx timeout [ 364.004188][ T9398] chnl_net:caif_netlink_parms(): no params data found 04:51:53 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:51:53 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) 04:51:53 executing program 2: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000006c0)) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) [ 364.658279][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.680863][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.689033][ T9346] device bridge_slave_0 entered promiscuous mode 04:51:54 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 365.211162][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.218245][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.244704][ T9346] device bridge_slave_1 entered promiscuous mode [ 365.510403][ T3560] Bluetooth: hci2: command 0x041b tx timeout 04:51:55 executing program 3: r0 = syz_io_uring_setup(0x45a2, &(0x7f0000000000)={0x0, 0x723d, 0x4, 0x2, 0x330}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_setup(0x7186, &(0x7f0000000100)={0x0, 0xb493, 0x8, 0x2, 0x58}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r4], 0x1, 0x0, 0x1}) syz_io_uring_setup(0x5, &(0x7f0000000200)={0x0, 0x4553, 0x20, 0x1, 0x30c, 0x0, r4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd_index=0x9, 0xfffffffffffffffa, &(0x7f0000000300)=""/16, 0x10, 0x4}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000380)="92ecb79778d9b1926cdf9dba60e1d62bd1dee8341cd5f2044377619294348b0f8d78c6f48df7d2809dc74f8ff27531cff7e29759f9cbc3f1cf6e3c23534f19908b8b95093dc7b0b0b3bde4d0bb65db87d1bcf468125c9e017275134e79a9f03f4d00d49aee18319ee518b919e619", 0x6e, 0x10, 0x1}) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r9 = syz_clone(0x20000000, &(0x7f0000000480)="e056b2ae6565acc2d9595df960d3ba", 0xf, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="568262a748dc1641d89a4ed5e808b94919365a0315e939580fc1015c101e240111e365e032860942822607cbcecd4a6b3ba17f1ced1c4fea80e5bc7e669b3e63937245b1ba2a019a316452497188bc058dd0c8aa22b0a96b5a1fbc02cef61fb0741641fe7024d0b67a0b0ad8e8690fc12bcaf6e1c57cadbd69986817770f016c3678f84fb03e07b2104796918b8788ef110405a71f38a623d3e5a827c27467201d878c283d4d323f0a81c56618efc51608a95baab6a937999ba5dabc5a6994f8164260e40f9c5ffc8f21e7c162411395dd348166") write$cgroup_pid(r8, &(0x7f0000000640)=r9, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x5}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000007c0)=[0x10000, 0x8]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000900)) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file1\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'wlan0\x00'}) 04:51:55 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x28, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1800}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x8b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x}]}, &(0x7f00000001c0)='GPL\x00', 0x17d1, 0x56, &(0x7f0000000200)=""/86, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0x1}, {0x0, 0x5, 0x1, 0xb}], 0x10, 0xfff}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000740)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x85981) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) gettid() r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') syz_clone(0x1008000, &(0x7f0000000a00)="d0b06cbf3c43b202302fcbe381ddc83fe16f133fc549c55664fc01a86937bd64358aff9c5f8bf0e6325b368124209ae22ff496e6ac1d402efe8eb1023c515ca7dbfac00361fb747dcda52e8cd555948b6d4f144c280a1013a98ba3a27a3b800e72c9ab36eb2b44526faac382d625915e90a1abe8551955a8bd13fdd6d6685353949a20ccbb1a3f5001a98e170e19ba0e945881125bbf3b5a9d82d0cfcbbf064a748d0542f28d7ac3af5b7352a6379abead906fbaea0a60a9", 0xb8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="d39deb5fa7ab6060f8979eeaa007e47f5c3b7beab69c8339c693440a1ee3fc31027b40526e96039089caaff317e31817e8944b3301669c494b5338f3ce0b58044854eb0a8a81cbc36dd16bd333fa5acf81c86e9509cb1dd97eab4118524fff0143f7ab43f3a069a06e75eb0b3759a6b77a7004b62a7d57053333c2e36afadb381f65b68479086dcb81025938b532df851f") syz_open_procfs$userns(r4, &(0x7f0000000e00)) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000e40)='ns/net\x00') r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000010c0)={'veth0_to_hsr\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001040)='syzkaller\x00', 0x60e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x7, 0x1f, 0x2}, 0x10, r1, 0x0, 0x0, &(0x7f0000001400)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x100000}, 0x90) [ 366.903554][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.580408][ T3558] Bluetooth: hci2: command 0x040f tx timeout [ 368.460514][ T3558] Bluetooth: hci4: command 0x0409 tx timeout [ 369.173079][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.670475][ T3593] Bluetooth: hci2: command 0x0419 tx timeout [ 370.550638][ T1065] Bluetooth: hci4: command 0x041b tx timeout [ 371.545131][ T9346] team0: Port device team_slave_0 added [ 372.359659][ T7214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.375882][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.392426][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.411157][ T9398] device bridge_slave_0 entered promiscuous mode [ 372.431708][ T9346] team0: Port device team_slave_1 added [ 372.620448][ T3560] Bluetooth: hci4: command 0x040f tx timeout [ 372.719576][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.731137][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.739248][ T9398] device bridge_slave_1 entered promiscuous mode [ 373.427729][ T7214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.617051][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.156288][ T7214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.278957][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.290300][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.349634][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.368780][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.408303][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.441056][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.490301][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.710486][ T1065] Bluetooth: hci4: command 0x0419 tx timeout [ 375.377900][ T7214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.463190][ T9398] team0: Port device team_slave_0 added [ 375.854966][ T9398] team0: Port device team_slave_1 added [ 375.990559][ T27] INFO: task syz-executor.3:6200 blocked for more than 143 seconds. [ 375.998776][ T27] Not tainted 5.15.152-syzkaller #0 [ 376.014750][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.037741][ T27] task:syz-executor.3 state:D stack:22008 pid: 6200 ppid: 3528 flags:0x00004006 [ 376.070326][ T27] Call Trace: [ 376.073642][ T27] [ 376.076586][ T27] __schedule+0x12c4/0x45b0 [ 376.088143][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 376.100297][ T27] ? print_irqtrace_events+0x210/0x210 [ 376.105892][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.128621][ T9346] device hsr_slave_0 entered promiscuous mode [ 376.137436][ T27] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 376.146880][ T27] ? __sched_text_start+0x8/0x8 [ 376.160349][ T27] ? __might_sleep+0xc0/0xc0 [ 376.165037][ T27] ? prepare_to_wait_event+0x3aa/0x3e0 [ 376.180344][ T27] schedule+0x11b/0x1f0 [ 376.184542][ T27] wb_wait_for_completion+0x164/0x290 [ 376.189987][ T27] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 376.220490][ T27] ? init_wait_entry+0xd0/0xd0 [ 376.225314][ T27] __writeback_inodes_sb_nr+0x2ce/0x370 [ 376.239726][ T27] ? writeback_inodes_sb_nr+0x30/0x30 [ 376.248936][ T27] ? down_read_trylock+0x24a/0x3b0 [ 376.286240][ T27] ? try_to_writeback_inodes_sb+0x1d/0xb0 [ 376.310365][ T27] ? cpumask_next+0xc3/0xf0 [ 376.314952][ T27] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 376.324677][ T27] try_to_writeback_inodes_sb+0x94/0xb0 [ 376.336149][ T27] ext4_da_write_begin+0x228/0xb60 [ 376.362341][ T27] ? jbd2_journal_start_reserved+0x300/0x300 [ 376.368463][ T27] ? ext4_set_page_dirty+0x340/0x340 [ 376.406963][ T27] ? rcu_is_watching+0x11/0xa0 [ 376.412171][ T27] ? __mark_inode_dirty+0x3dd/0xd60 [ 376.417397][ T27] generic_perform_write+0x2bf/0x5b0 [ 376.430309][ T27] ? __mnt_drop_write_file+0xbe/0xf0 [ 376.438798][ T27] ? grab_cache_page_write_begin+0x90/0x90 [ 376.460507][ T27] ? ext4_write_checks+0x255/0x2c0 [ 376.465731][ T27] ext4_buffered_write_iter+0x227/0x360 [ 376.479972][ T27] ext4_file_write_iter+0x87c/0x1990 [ 376.485649][ T27] ? _raw_spin_unlock+0x24/0x40 [ 376.490831][ T27] ? follow_page_pte+0xad5/0xb60 [ 376.495879][ T27] ? follow_page_mask+0xb59/0x13f0 [ 376.506725][ T27] ? ext4_file_read_iter+0x6c0/0x6c0 [ 376.516450][ T27] ? follow_page+0x130/0x130 [ 376.525474][ T27] ? find_vma+0xd3/0x230 [ 376.529763][ T27] ? check_vma_flags+0x407/0x490 [ 376.549370][ T27] ? iov_iter_kvec+0x4a/0x170 [ 376.558668][ T27] __kernel_write+0x5b1/0xa60 [ 376.567935][ T27] ? vfs_read+0xe10/0xe10 [ 376.576672][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 376.585826][ T27] ? down_read_killable+0x1d2/0x350 [ 376.610512][ T27] __dump_emit+0x264/0x3a0 [ 376.615066][ T27] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 376.630413][ T27] ? dump_emit+0x152/0x3f0 [ 376.634879][ T27] dump_user_range+0x91/0x320 [ 376.650419][ T27] elf_core_dump+0x3c7d/0x4570 [ 376.655230][ T27] ? reacquire_held_locks+0x660/0x660 [ 376.690549][ T27] ? load_elf_library+0xa40/0xa40 [ 376.695621][ T27] ? mark_lock+0x98/0x340 [ 376.699965][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 376.718459][ T27] ? rcu_read_lock_any_held+0xb3/0x160 [ 376.732430][ T27] ? kmem_cache_alloc+0x128/0x280 [ 376.754766][ T27] do_coredump+0x1852/0x31e0 [ 376.764789][ T27] ? ____kasan_slab_free+0xd8/0x120 [ 376.770027][ T27] ? slab_free_freelist_hook+0xdd/0x160 [ 376.781111][ T27] ? nfs_ssc_unregister+0x30/0x30 [ 376.786201][ T27] ? get_signal+0x8ac/0x14e0 [ 376.806536][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 376.823384][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 376.840376][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 376.860414][ T27] get_signal+0xc06/0x14e0 [ 376.864885][ T27] arch_do_signal_or_restart+0xc3/0x1890 [ 376.884415][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 376.899289][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 376.910446][ T27] ? _raw_spin_unlock+0x40/0x40 [ 376.915343][ T27] ? get_sigframe_size+0x10/0x10 [ 376.936753][ T27] ? force_sig_info_to_task+0x34a/0x470 [ 376.950357][ T27] ? force_sig+0x114/0x1d0 [ 376.954821][ T27] ? exit_to_user_mode_loop+0x39/0x130 [ 376.986606][ T27] exit_to_user_mode_loop+0x97/0x130 [ 377.000942][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 377.006533][ T27] irqentry_exit_to_user_mode+0x5/0x40 [ 377.040351][ T27] exc_general_protection+0x358/0x4f0 [ 377.045774][ T27] ? vtime_user_enter+0x1eb/0x2d0 [ 377.064962][ T27] ? __context_tracking_enter+0x5f/0x90 [ 377.084367][ T27] asm_exc_general_protection+0x22/0x30 [ 377.089957][ T27] RIP: 0033:0x7f9d1f6e9db1 [ 377.111024][ T27] RSP: 002b:0000000020000480 EFLAGS: 00010217 [ 377.132803][ T27] RAX: 0000000000000000 RBX: 00007f9d1f817f80 RCX: 00007f9d1f6e9da9 [ 377.151268][ T27] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000020000000 [ 377.159276][ T27] RBP: 00007f9d1f73647a R08: 0000000020000540 R09: 0000000020000540 [ 377.195444][ T27] R10: 0000000020000500 R11: 0000000000000206 R12: 0000000000000000 [ 377.210557][ T27] R13: 000000000000000b R14: 00007f9d1f817f80 R15: 00007ffce5fdc268 [ 377.218573][ T27] [ 377.234168][ T27] [ 377.234168][ T27] Showing all locks held in the system: [ 377.235081][ T9346] device hsr_slave_1 entered promiscuous mode [ 377.250434][ T27] 3 locks held by kworker/u4:0/9: [ 377.266889][ T27] 1 lock held by khungtaskd/27: [ 377.280306][ T27] #0: ffffffff8c91f720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 377.301867][ T27] 3 locks held by kworker/0:2/1065: [ 377.331004][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 377.342325][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.350801][ T9346] Cannot create hsr debugfs directory [ 377.355826][ T27] #1: ffffc9000515fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 377.387997][ T27] #2: ffffffff8d9dba08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 377.415786][ T27] 2 locks held by getty/3256: [ 377.450297][ T27] #0: ffff8880250e1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 377.492025][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 377.550327][ T27] 2 locks held by kworker/0:3/3558: [ 377.555559][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 377.589108][ T27] #1: ffffc90004757d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 377.650490][ T27] 3 locks held by syz-executor.3/6200: [ 377.655978][ T27] #0: ffff88814b0b2460 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1825/0x31e0 [ 377.676950][ T27] #1: ffff88805a378de8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xa0/0x360 [ 377.709015][ T27] #2: ffff88814b0b20e0 (&type->s_umount_key#32){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x1d/0xb0 [ 377.738182][ T27] 5 locks held by kworker/u4:11/6468: [ 377.767462][ T27] 1 lock held by syz-executor.3/6502: [ 377.773032][ T27] 6 locks held by kworker/u4:21/7214: [ 377.778433][ T27] #0: ffff888011dcd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 377.830483][ T27] #1: ffffc90003a4fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 377.843493][ T27] #2: ffffffff8d9cfe50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 377.862591][ T27] #3: ffffffff8da01028 (devlink_mutex){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xb1/0x350 [ 377.892387][ T27] #4: ffff88805b73b658 (&nsim_bus_dev->nsim_bus_reload_lock){+.+.}-{3:3}, at: nsim_dev_reload_down+0x58/0x160 [ 377.934822][ T27] #5: ffffffff8c923ce8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 377.959225][ T27] 1 lock held by syz-executor.2/8102: [ 377.970282][ T27] 1 lock held by syz-executor.2/8125: [ 377.975681][ T27] 1 lock held by syz-executor.3/8138: [ 377.990283][ T27] 1 lock held by syz-executor.3/8173: [ 377.995683][ T27] 3 locks held by syz-executor.2/8188: [ 378.020300][ T27] 1 lock held by syz-executor.3/8236: [ 378.025791][ T27] 1 lock held by syz-executor.2/8246: [ 378.037372][ T27] 1 lock held by syz-executor.3/8258: [ 378.042843][ T27] 1 lock held by syz-executor.3/8455: [ 378.048220][ T27] 2 locks held by syz-executor.2/8820: [ 378.073902][ T27] 1 lock held by syz-executor.3/8822: [ 378.079304][ T27] 1 lock held by syz-executor.2/8830: [ 378.084737][ T27] 2 locks held by syz-executor.3/8833: [ 378.090201][ T27] 1 lock held by syz-executor.3/8846: [ 378.124289][ T27] 1 lock held by syz-executor.2/8850: [ 378.129700][ T27] 1 lock held by syz-executor.2/8867: [ 378.138893][ T27] 1 lock held by syz-executor.2/8874: [ 378.147420][ T27] 1 lock held by syz-executor.3/8882: [ 378.156372][ T27] 1 lock held by syz-executor.3/8888: [ 378.170287][ T27] 1 lock held by syz-executor.2/8924: [ 378.176009][ T27] 1 lock held by syz-executor.3/8939: [ 378.195096][ T27] 1 lock held by syz-executor.2/9146: [ 378.200694][ T27] 1 lock held by syz-executor.3/9156: [ 378.206088][ T27] 2 locks held by syz-executor.2/9170: [ 378.211617][ T27] 1 lock held by syz-executor.3/9181: [ 378.216984][ T27] 1 lock held by syz-executor.2/9190: [ 378.244980][ T27] 1 lock held by syz-executor.3/9209: [ 378.256596][ T27] #0: ffff88814b0b4bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1f6/0x3d10 [ 378.267249][ T27] 2 locks held by syz-executor.2/9216: [ 378.296047][ T27] 1 lock held by syz-executor.2/9229: [ 378.310353][ T27] 2 locks held by syz-executor.2/9241: [ 378.315849][ T27] 1 lock held by syz-executor.3/9252: [ 378.321290][ T27] 1 lock held by syz-executor.2/9262: [ 378.326662][ T27] 1 lock held by syz-executor.3/9284: [ 378.350331][ T27] 1 lock held by syz-executor.3/9299: [ 378.355742][ T27] 1 lock held by syz-executor.3/9327: [ 378.371609][ T27] 1 lock held by syz-executor.4/9346: [ 378.377014][ T27] #0: ffffffff8d9dba08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 378.386845][ T27] 2 locks held by syz-executor.0/9398: [ 378.410770][ T27] #0: ffffffff8d9dba08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 378.420209][ T27] #1: ffffffff8c923ce8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 378.470353][ T27] 1 lock held by syz-executor.1/9432: [ 378.475758][ T27] #0: ffffffff8d9dba08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 378.518763][ T27] [ 378.526724][ T27] ============================================= [ 378.526724][ T27] [ 378.535202][ T27] NMI backtrace for cpu 0 [ 378.539537][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.152-syzkaller #0 [ 378.542476][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.547518][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 378.547530][ T27] Call Trace: [ 378.553957][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.563789][ T27] [ 378.563804][ T27] dump_stack_lvl+0x1e3/0x2cb [ 378.580949][ T27] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 378.586611][ T27] ? panic+0x84d/0x84d [ 378.590699][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 378.595847][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 378.600792][ T27] ? __wake_up_klogd+0xd5/0x100 [ 378.605677][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 378.611846][ T27] ? _printk+0xd1/0x111 [ 378.616017][ T27] ? panic+0x84d/0x84d [ 378.620088][ T27] ? __wake_up_klogd+0xcc/0x100 [ 378.624952][ T27] ? panic+0x84d/0x84d [ 378.629036][ T27] ? __rcu_read_unlock+0x92/0x100 [ 378.634066][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 378.640229][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 378.646225][ T27] watchdog+0xe72/0xeb0 [ 378.650456][ T27] kthread+0x3f6/0x4f0 [ 378.654528][ T27] ? hungtask_pm_notify+0x50/0x50 [ 378.659562][ T27] ? kthread_blkcg+0xd0/0xd0 [ 378.664156][ T27] ret_from_fork+0x1f/0x30 [ 378.668694][ T27] [ 378.672385][ T27] Sending NMI from CPU 0 to CPUs 1: [ 378.677598][ C1] NMI backtrace for cpu 1 [ 378.677609][ C1] CPU: 1 PID: 7213 Comm: kworker/u4:20 Not tainted 5.15.152-syzkaller #0 [ 378.677624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 378.677632][ C1] Workqueue: bat_events batadv_nc_worker [ 378.677723][ C1] RIP: 0010:__lock_acquire+0xcd8/0x1ff0 [ 378.677739][ C1] Code: 00 00 00 00 00 fc ff df 0f b6 04 38 84 c0 0f 85 0e 0c 00 00 83 3d 37 d1 d9 0f 00 75 44 48 8b 6c 24 58 8d 45 3f 85 ed 0f 49 c5 f8 06 48 98 48 8d 3c c5 c0 f0 bc 8f be 08 00 00 00 e8 21 59 67 [ 378.677750][ C1] RSP: 0018:ffffc90003a3f9a0 EFLAGS: 00000002 [ 378.677761][ C1] RAX: 0000000000000015 RBX: ffff88802055a900 RCX: ffffffff913c6f03 [ 378.677771][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: dffffc0000000000 [ 378.677780][ C1] RBP: 0000000000000015 R08: dffffc0000000000 R09: fffffbfff1f79e19 [ 378.677789][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002 [ 378.677798][ C1] R13: ffff88802055a8a8 R14: 0000000000000002 R15: ffff88802055a920 [ 378.677807][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 378.677819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.677829][ C1] CR2: 0000555556e4e938 CR3: 000000002166f000 CR4: 00000000003506e0 [ 378.677841][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.677848][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.677856][ C1] Call Trace: [ 378.677861][ C1] [ 378.677866][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 378.677882][ C1] ? read_lock_is_recursive+0x10/0x10 [ 378.677895][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 378.677915][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 378.677929][ C1] ? nmi_handle+0xf7/0x370 [ 378.677943][ C1] ? __lock_acquire+0xcd8/0x1ff0 [ 378.677954][ C1] ? default_do_nmi+0x62/0x150 [ 378.677968][ C1] ? exc_nmi+0xab/0x120 [ 378.677979][ C1] ? end_repeat_nmi+0x16/0x31 [ 378.677997][ C1] ? __lock_acquire+0xcd8/0x1ff0 [ 378.678009][ C1] ? __lock_acquire+0xcd8/0x1ff0 [ 378.678021][ C1] ? __lock_acquire+0xcd8/0x1ff0 [ 378.678033][ C1] [ 378.678036][ C1] [ 378.678050][ C1] lock_acquire+0x1db/0x4f0 [ 378.678062][ C1] ? rcu_lock_acquire+0x5/0x30 [ 378.678076][ C1] ? read_lock_is_recursive+0x10/0x10 [ 378.678089][ C1] ? rcu_lock_release+0x5/0x20 [ 378.678100][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 378.678113][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 378.678128][ C1] rcu_lock_acquire+0x2a/0x30 [ 378.678140][ C1] ? rcu_lock_acquire+0x5/0x30 [ 378.678151][ C1] batadv_nc_worker+0xc1/0x5b0 [ 378.678165][ C1] process_one_work+0x8a1/0x10c0 [ 378.678185][ C1] ? worker_detach_from_pool+0x260/0x260 [ 378.678199][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 378.678212][ C1] ? kthread_data+0x4e/0xc0 [ 378.678225][ C1] ? wq_worker_running+0x97/0x170 [ 378.678238][ C1] worker_thread+0xaca/0x1280 [ 378.678258][ C1] kthread+0x3f6/0x4f0 [ 378.678269][ C1] ? rcu_lock_release+0x20/0x20 [ 378.678282][ C1] ? kthread_blkcg+0xd0/0xd0 [ 378.678294][ C1] ret_from_fork+0x1f/0x30 [ 378.678313][ C1] [ 378.860276][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 378.993021][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.152-syzkaller #0 [ 379.001002][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 379.011066][ T27] Call Trace: [ 379.014350][ T27] [ 379.017294][ T27] dump_stack_lvl+0x1e3/0x2cb [ 379.021983][ T27] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 379.027625][ T27] ? panic+0x84d/0x84d [ 379.031711][ T27] panic+0x318/0x84d [ 379.035604][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 379.041242][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 379.047405][ T27] ? fb_is_primary_device+0xcc/0xcc [ 379.052612][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 379.058684][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 379.064846][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 379.071028][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 379.077208][ T27] watchdog+0xeb0/0xeb0 [ 379.081376][ T27] kthread+0x3f6/0x4f0 [ 379.085451][ T27] ? hungtask_pm_notify+0x50/0x50 [ 379.090486][ T27] ? kthread_blkcg+0xd0/0xd0 [ 379.095087][ T27] ret_from_fork+0x1f/0x30 [ 379.099518][ T27] [ 379.102598][ T27] Kernel Offset: disabled [ 379.106920][ T27] Rebooting in 86400 seconds..