syzkaller login: ps_root_recvmsgcb: failed to send message to pid 4131: Connection refused ps_root_recvmsgcb: failed to send message to pid 4130: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4154: Connection refused ps_root_recvmsgcb: failed to send message to pid 4153: Connection refused ps_root_recvmsg: Invalid argument [ 295.700816][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 295.787138][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsg: Invalid argument [ 295.840702][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 295.949960][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4159: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4167: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 313.897981][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 4177: Connection refused ps_root_recvmsgcb: failed to send message to pid 4178: Connection refused ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument [ 322.386134][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 4168: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument Warning: Permanently added '[localhost]:23357' (ECDSA) to the list of known hosts. ps_root_recvmsgcb: failed to send message to pid 4176: Connection refused ps_root_recvmsgcb: failed to send message to pid 4186: Connection refused ps_root_recvmsgcb: failed to send message to pid 4185: Connection refused ps_root_recvmsg: Invalid argument [ 343.868720][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 343.895996][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. 1970/01/01 00:05:52 fuzzer started [ 360.499898][ T3991] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:06:05 dialing manager at localhost:45695 1970/01/01 00:06:09 syscalls: 2984 1970/01/01 00:06:09 code coverage: enabled 1970/01/01 00:06:09 comparison tracing: enabled 1970/01/01 00:06:09 extra coverage: enabled 1970/01/01 00:06:09 setuid sandbox: enabled 1970/01/01 00:06:09 namespace sandbox: enabled 1970/01/01 00:06:09 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:09 fault injection: enabled 1970/01/01 00:06:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:09 net packet injection: enabled 1970/01/01 00:06:09 net device setup: enabled 1970/01/01 00:06:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:09 USB emulation: enabled 1970/01/01 00:06:09 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:09 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:09 802.15.4 emulation: enabled ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:06:13 fetching corpus: 50, signal 18706/20309 (executing program) 1970/01/01 00:06:15 fetching corpus: 100, signal 25261/28139 (executing program) 1970/01/01 00:06:17 fetching corpus: 150, signal 27953/32097 (executing program) 1970/01/01 00:06:21 fetching corpus: 200, signal 31105/36355 (executing program) [ 384.527318][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.531895][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:06:24 fetching corpus: 250, signal 33507/39809 (executing program) 1970/01/01 00:06:26 fetching corpus: 300, signal 36744/43874 (executing program) 1970/01/01 00:06:29 fetching corpus: 350, signal 38262/46362 (executing program) 1970/01/01 00:06:32 fetching corpus: 400, signal 39454/48522 (executing program) 1970/01/01 00:06:34 fetching corpus: 450, signal 41156/51029 (executing program) 1970/01/01 00:06:37 fetching corpus: 500, signal 45051/55122 (executing program) 1970/01/01 00:06:39 fetching corpus: 550, signal 45993/56820 (executing program) 1970/01/01 00:06:41 fetching corpus: 600, signal 46821/58394 (executing program) 1970/01/01 00:06:44 fetching corpus: 650, signal 47545/59850 (executing program) 1970/01/01 00:06:45 fetching corpus: 700, signal 48980/61808 (executing program) 1970/01/01 00:06:48 fetching corpus: 750, signal 51206/64264 (executing program) 1970/01/01 00:06:49 fetching corpus: 784, signal 51733/65479 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/66387 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/67272 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/68115 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/69002 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/69920 (executing program) 1970/01/01 00:06:50 fetching corpus: 784, signal 51733/70819 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/71670 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/72562 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/73422 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/74283 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/75119 (executing program) 1970/01/01 00:06:51 fetching corpus: 784, signal 51733/75979 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/76852 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/77723 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/78575 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/79384 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/80249 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/81119 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/82001 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/82811 (executing program) 1970/01/01 00:06:52 fetching corpus: 784, signal 51733/83652 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/84529 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/85402 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/86288 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/87124 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/88022 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/88901 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/89790 (executing program) 1970/01/01 00:06:53 fetching corpus: 784, signal 51733/90652 (executing program) 1970/01/01 00:06:54 fetching corpus: 784, signal 51733/91124 (executing program) 1970/01/01 00:06:54 fetching corpus: 784, signal 51733/91124 (executing program) ps_root_recvmsgcb: failed to send message to pid 4238: Connection refused ps_root_recvmsgcb: failed to send message to pid 4245: Connection refused ps_root_recvmsgcb: failed to send message to pid 4246: Connection refused ps_root_recvmsgcb: failed to send message to pid 4248: Connection refused [ 445.862598][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.866151][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:08:05 starting 2 fuzzer processes ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:08:22 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x999]}, 0x8, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x5, 0x0, 0x0, 0x9, 0x4, 0x5], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7d}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ee}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x371}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0xcc}}, 0x4000) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000004c0)=0x1) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x3, &(0x7f00000007c0)=""/226, 0xe2}, 0x40000000) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000980)=""/53, 0x35}], 0x2) r4 = dup(r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_to_team\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) statx(r4, &(0x7f0000000d00)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000e40)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000c40)='/dev/loop0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='fuseblk\x00', 0x84008, &(0x7f0000000f80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'xfrm0\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@hash='hash'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_lt={'uid<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040801) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 507.303825][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.306387][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.241361][ T4260] IPVS: ftp: loaded support on port[0] = 21 [ 520.681968][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 522.387494][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.390734][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.459899][ T4260] device bridge_slave_0 entered promiscuous mode [ 522.641695][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.657937][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.735871][ T4260] device bridge_slave_1 entered promiscuous mode [ 523.416892][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.605526][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.292167][ T4260] team0: Port device team_slave_0 added [ 524.401898][ T4260] team0: Port device team_slave_1 added [ 525.108181][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.109705][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.112297][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.242399][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.245883][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.248474][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.031708][ T4260] device hsr_slave_0 entered promiscuous mode [ 526.118187][ T4260] device hsr_slave_1 entered promiscuous mode 00:08:46 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) [ 531.290034][ T4260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.542072][ T4260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.679718][ T4260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.851870][ T4260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 535.109791][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.646709][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.706051][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.798476][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.909468][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.930583][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.958621][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.961414][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.018936][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 536.328150][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.349355][ T2609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.365575][ T2609] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.366834][ T2609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.540788][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.847533][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.088873][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.149827][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.268795][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.476386][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.532166][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.886539][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.946157][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.370999][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.438650][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.897683][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 539.520300][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 539.677095][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.288306][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.458200][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.500658][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 548.896130][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 548.964800][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.120390][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.164795][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.289191][ T4260] device veth0_vlan entered promiscuous mode [ 549.932013][ T4260] device veth1_vlan entered promiscuous mode [ 551.192518][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.257731][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.518196][ T4260] device veth0_macvtap entered promiscuous mode [ 551.829010][ T4260] device veth1_macvtap entered promiscuous mode [ 552.270867][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready ps_root_recvmsgcb: failed to send message to pid 4255: Connection refused [ 552.855195][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.866467][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.921610][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.202504][ T4485] IPVS: ftp: loaded support on port[0] = 21 [ 553.266717][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.287983][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 553.359554][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 553.919532][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.925028][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.926788][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.928410][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.599684][ T4260] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 559.538716][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 561.681209][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.716508][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.811494][ T4485] device bridge_slave_0 entered promiscuous mode [ 561.972436][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.995845][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.048515][ T4485] device bridge_slave_1 entered promiscuous mode [ 563.112379][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.291366][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.145743][ T4485] team0: Port device team_slave_0 added [ 564.332049][ T4485] team0: Port device team_slave_1 added [ 565.261398][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.262685][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.299387][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.557504][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.558811][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.561184][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active ps_root_recvmsgcb: failed to send message to pid 4256: Connection refused 00:09:23 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x999]}, 0x8, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x5, 0x0, 0x0, 0x9, 0x4, 0x5], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7d}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ee}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x371}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0xcc}}, 0x4000) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000004c0)=0x1) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x3, &(0x7f00000007c0)=""/226, 0xe2}, 0x40000000) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000980)=""/53, 0x35}], 0x2) r4 = dup(r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_to_team\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) statx(r4, &(0x7f0000000d00)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000e40)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000c40)='/dev/loop0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='fuseblk\x00', 0x84008, &(0x7f0000000f80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'xfrm0\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@hash='hash'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_lt={'uid<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040801) [ 566.617043][ T4485] device hsr_slave_0 entered promiscuous mode [ 566.652094][ T4485] device hsr_slave_1 entered promiscuous mode [ 566.679111][ T4485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.695126][ T4485] Cannot create hsr debugfs directory ps_root_recvmsgcb: failed to send message to pid 4257: Connection refused [ 568.748024][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.750216][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 ps_root_recvmsgcb: failed to send message to pid 4258: Connection refused 00:09:29 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x999]}, 0x8, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x5, 0x0, 0x0, 0x9, 0x4, 0x5], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7d}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ee}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x371}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0xcc}}, 0x4000) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000004c0)=0x1) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x3, &(0x7f00000007c0)=""/226, 0xe2}, 0x40000000) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000980)=""/53, 0x35}], 0x2) r4 = dup(r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_to_team\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) statx(r4, &(0x7f0000000d00)='./file0\x00', 0x100, 0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000e40)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000c40)='/dev/loop0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='fuseblk\x00', 0x84008, &(0x7f0000000f80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'xfrm0\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@hash='hash'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_lt={'uid<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040801) [ 572.561258][ T4485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.781852][ T4485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.952584][ T4485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.081778][ T4485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.277118][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.830926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.890621][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.128048][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.371702][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.402495][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.442087][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.445767][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.567206][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.749370][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.768887][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.807332][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.808693][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.019752][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.584271][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.000907][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.110651][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.325718][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 00:09:37 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) [ 580.580972][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.635087][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 581.490300][ T4485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.492048][ T4485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.751470][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 581.838088][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.871463][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 581.898930][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.957263][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.102095][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.232477][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.758955][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.170354][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.251020][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.581673][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.610108][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.671608][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 591.700533][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.742149][ T4485] device veth0_vlan entered promiscuous mode [ 592.109907][ T4485] device veth1_vlan entered promiscuous mode [ 593.406123][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.452189][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.779610][ T4485] device veth0_macvtap entered promiscuous mode [ 593.816324][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.086841][ T4485] device veth1_macvtap entered promiscuous mode [ 594.866880][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 594.871452][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.960493][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.998677][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.021978][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.222454][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 595.226974][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.270453][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.446949][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.497099][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.759491][ T4485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.761355][ T4485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.786014][ T4485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.787774][ T4485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:10:02 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) 00:10:02 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) [ 610.695789][ C1] hrtimer: interrupt took 2161400 ns 00:10:08 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) 00:10:10 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) 00:10:14 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:10:18 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) 00:10:22 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:10:25 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) [ 630.185820][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.188013][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:10:28 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:10:34 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) 00:10:35 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:10:41 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:10:41 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) 00:10:47 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) dup3(r0, r0, 0x80000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:10:49 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) socket$nl_generic(0x10, 0x3, 0x10) 00:10:53 executing program 0: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:10:56 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) 00:10:58 executing program 0: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:11:03 executing program 0: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:11:03 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) 00:11:07 executing program 0: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:11:10 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)) 00:11:12 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:15 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) 00:11:18 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 4741: Connection refused 00:11:21 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) 00:11:23 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:26 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) 00:11:27 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 691.634081][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.635613][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:11:30 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) ps_root_recvmsgcb: failed to send message to pid 4754: Connection refused 00:11:32 executing program 0: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 4758: Connection refused ps_root_recvmsgcb: failed to send message to pid 4760: Connection refused 00:11:35 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:11:36 executing program 0: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:40 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:11:41 executing program 0: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:45 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:11:47 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:49 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:11:52 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:55 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:11:56 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:11:59 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:02 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x0, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:04 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:09 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x0, 0x0, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:11 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:14 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:16 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:19 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:21 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:12:24 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:27 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:29 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 753.064034][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.066545][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:12:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:34 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument 00:12:39 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:12:40 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:44 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:45 executing program 0: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:50 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:12:55 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:12:55 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:13:00 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:13:00 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:13:04 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:13:05 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:13:09 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:13:11 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:13:14 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:13:15 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:13:19 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:13:21 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 4855: Connection refused 00:13:27 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:29 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x0, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) [ 814.509304][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.511327][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:13:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:34 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x0, 0x0, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:13:37 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:38 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x0, 0x0, 0x0, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) ps_root_recvmsgcb: failed to send message to pid 4870: Connection refused ps_root_recvmsgcb: failed to send message to pid 4872: Connection refused 00:13:41 executing program 0: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:43 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180), 0xc) ps_root_recvmsgcb: failed to send message to pid 4873: Connection refused 00:13:46 executing program 0: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:49 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:51 executing program 0: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:55 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:13:56 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:00 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:02 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:09 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:15 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:20 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:23 executing program 1: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:26 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:28 executing program 1: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:31 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:14:32 executing program 1: syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 875.948299][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.950399][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:14:36 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:14:37 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) 00:14:41 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:43 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:14:47 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:14:51 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:53 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:56 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:14:59 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) 00:15:01 executing program 0: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) 00:15:04 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) 00:15:06 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:15:09 executing program 1: syz_io_uring_setup(0x2290, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) 00:15:09 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:15:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:15:16 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:15:20 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:15:21 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:15:25 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:15:27 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x0, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:15:29 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:15:33 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:15:34 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) [ 937.384343][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.386487][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 ps_root_recvmsgcb: failed to send message to pid 4978: Connection refused 00:15:37 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:15:40 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:15:42 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) 00:15:45 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 4995: Connection refused 00:15:48 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) ps_root_recvmsgcb: failed to send message to pid 4993: Connection refused 00:15:50 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 4998: Connection refused 00:15:53 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 00:15:55 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:15:56 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 00:16:00 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 00:16:01 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 00:16:05 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:07 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 00:16:10 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:12 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) 00:16:14 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:17 executing program 1: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:19 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:23 executing program 1: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:24 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:27 executing program 1: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:30 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 00:16:31 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) 00:16:35 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) [ 998.822192][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.827473][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:16:38 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 00:16:41 executing program 0: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:43 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) socket$nl_generic(0x10, 0x3, 0x10) 00:16:46 executing program 0: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:51 executing program 0: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:16:51 executing program 1: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) dup3(r0, r0, 0x80000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument 00:16:57 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) ps_root_recvmsg: Invalid argument 00:16:58 executing program 1: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) dup3(r0, r0, 0x80000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:17:03 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) 00:17:04 executing program 1: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) dup3(r0, r0, 0x80000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:17:09 executing program 1: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:17:11 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) 00:17:15 executing program 1: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:17:16 executing program 0: r0 = syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = dup3(r0, r0, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7f, 0x800, 0x1000, 0x3ff, 0x3ff}, &(0x7f0000000280)=0x14) syz_io_uring_setup(0xd22, &(0x7f0000000000)={0x0, 0x39d0, 0x20, 0x1, 0x135, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:17:20 executing program 1: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:17:21 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) 00:17:26 executing program 1: syz_io_uring_setup(0x80c, &(0x7f00000002c0)={0x0, 0x22bd, 0x20, 0x0, 0x2d}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:17:32 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) 00:17:33 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1060.270925][ T2904] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.274129][ T2904] ieee802154 phy1 wpan1: encryption failed: -22 00:17:40 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:17:40 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) splice(r7, &(0x7f0000000500)=0x4, r8, &(0x7f0000000580)=0x7, 0x98, 0x8) ps_root_recvmsgcb: failed to send message to pid 5098: Connection refused 00:17:45 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:17:49 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xf, 0x410402) 00:17:50 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x9f3f, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:17:55 executing program 1: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 5109: Connection refused ps_root_recvmsgcb: failed to send message to pid 5110: Connection refused 00:17:58 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self\x00', 0x200, 0x0) 00:18:00 executing program 1: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ps_root_recvmsgcb: failed to send message to pid 5116: Connection refused 00:18:05 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r0, 0x0) 00:18:07 executing program 1: r0 = syz_io_uring_setup(0x2290, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:18:14 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) socket$nl_generic(0x10, 0x3, 0x10) 00:18:14 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:18:20 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:18:21 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000480)={0x0, 0x20, [], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) 00:18:25 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:18:28 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) r3 = syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r3, 0x1000}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f00000003c0)={r4, r5+60000000}, &(0x7f0000000400)={[0x400]}, 0x8) 00:18:29 executing program 1: r0 = syz_io_uring_setup(0x2290, &(0x7f0000000140)={0x0, 0x9f3f, 0x0, 0x1, 0x26f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:18:35 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d18, &(0x7f0000000000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl(r0, 0xe5, &(0x7f0000000040)="f764bba0a08b34da93793cccec1a916a331eea1a5423a98e3b72657de9e117ac35451307d0d55c15d3a0dc0a1a218bbe40248405ba71f58efaa8af7ea3336016964b275def301d8f5677dbfe5d5674bf028c8b0f18e2abf83247a393804c1c99") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x13}) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x1, 0x8, 0x1, 0xd2, "5703940ec5495a0f1c41a9ecb49f2b8c6503f6607a57e49bb283e0e7fb9345e53c808055c028378c608444ab6c9db918290db165b7e04747ea3f40378e05fe2473f1d1d6f38c0a86c7d4c6fd030ffe8513d0cf9c89f340683b9431b6c1f5b098d565310aa32ab74b065f9e5bc286872c6f9801fd0aeca62b7db38304a2f2ec7492ab9746a9dd0250e6b603926b45072e28ff1f2420526938cf541c2bef1157d6afd4d85c1a87b9c3f06e3ba46d0e181699060a072cd3214583aaf0f261735bf32f8d759bb26a2150d3c3bd9f99d9a22c9c2e"}}, 0xde) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000002c0)) syz_open_dev$hidraw(&(0x7f0000000300)='/dev/hidraw#\x00', 0x1ba1, 0x801) clock_gettime(0x0, &(0x7f0000000380)) [ 1118.296024][ T5197] ================================================================== [ 1118.299884][ T5197] BUG: KASAN: use-after-free in idr_for_each+0xf4/0x160 [ 1118.301942][ T5197] Read of size 8 at addr ffffffe01102f9f8 by task syz-executor.1/5197 [ 1118.304950][ T5197] [ 1118.306643][ T5197] CPU: 0 PID: 5197 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 [ 1118.308604][ T5197] Hardware name: riscv-virtio,qemu (DT) [ 1118.310166][ T5197] Call Trace: [ 1118.311254][ T5197] [] walk_stackframe+0x0/0x23c [ 1118.312897][ T5197] [ 1118.314019][ T5197] Allocated by task 5197: [ 1118.315512][ T5197] (stack is not available) [ 1118.316669][ T5197] [ 1118.317444][ T5197] Freed by task 97: [ 1118.318330][ T5197] (stack is not available) [ 1118.319191][ T5197] [ 1118.319916][ T5197] The buggy address belongs to the object at ffffffe01102f9c0 [ 1118.319916][ T5197] which belongs to the cache radix_tree_node of size 576 [ 1118.321797][ T5197] The buggy address is located 56 bytes inside of [ 1118.321797][ T5197] 576-byte region [ffffffe01102f9c0, ffffffe01102fc00) [ 1118.324672][ T5197] The buggy address belongs to the page: [ 1118.327009][ T5197] page:ffffffcf02448b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9122c [ 1118.329113][ T5197] head:ffffffcf02448b00 order:2 compound_mapcount:0 compound_pincount:0 [ 1118.331445][ T5197] flags: 0x10200(slab|head) [ 1118.333744][ T5197] raw: 0000000000010200 ffffffcf02448900 0000000200000002 ffffffe006e04a00 [ 1118.336993][ T5197] raw: 0000000000000000 0000000080170017 00000001ffffffff 0000000000000000 [ 1118.338393][ T5197] page dumped because: kasan: bad access detected [ 1118.342286][ T5197] [ 1118.343255][ T5197] Memory state around the buggy address: [ 1118.345269][ T5197] ffffffe01102f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1118.346622][ T5197] ffffffe01102f900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1118.347913][ T5197] >ffffffe01102f980: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1118.349098][ T5197] ^ [ 1118.350362][ T5197] ffffffe01102fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1118.351627][ T5197] ffffffe01102fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1118.353149][ T5197] ================================================================== [ 1118.355371][ T5197] Disabling lock debugging due to kernel taint [ 1118.521028][ T5197] Kernel panic - not syncing: panic_on_warn set ... [ 1118.522823][ T5197] CPU: 1 PID: 5197 Comm: syz-executor.1 Tainted: G B 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 [ 1118.524260][ T5197] Hardware name: riscv-virtio,qemu (DT) [ 1118.525019][ T5197] Call Trace: [ 1118.525662][ T5197] [] walk_stackframe+0x0/0x23c [ 1118.527109][ T5197] SMP: stopping secondary CPUs [ 1118.528875][ T5197] Dumping ftrace buffer: [ 1118.530191][ T5197] (ftrace buffer empty) [ 1118.531798][ T5197] Rebooting in 1 seconds.. Connection to localhost closed by remote host. VM DIAGNOSIS: 01:11:17 Registers: info registers vcpu 0 pc ffffffe00019611e mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe0000c266a sepc ffffffe0003967e6 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe000196f76 x2/sp ffffffe01f60b5d0 x3/gp ffffffe005d25378 x4/tp ffffffe0091c16c0 x5/t0 0000000000046000 x6/t1 0000000000000001 x7/t2 00000000000f4240 x8/s0 ffffffe01f60b600 x9/s1 0000000000010004 x10/a0 0000000000000003 x11/a1 ffffffe0091c16c0 x12/a2 0000000000010004 x13/a3 ffffffe003bbdfe8 x14/a4 ffffffe0091c16c0 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe000116d8e x18/s2 0000000000000000 x19/s3 ffffffe0091c16c0 x20/s4 ffffffe003bbe000 x21/s5 ffffffe003bbe152 x22/s6 0000000000000001 x23/s7 ffffffe00592e708 x24/s8 ffffffe067d67228 x25/s9 ffffffe067d67328 x26/s10 ffffffe067d672a8 x27/s11 ffffffe067d67108 x28/t3 2fa594ab26638200 x29/t4 ffffffc4045737b2 x30/t5 ffffffc4045737ba x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe0000becb6 mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00039bdf8 sepc ffffffe0000fa54c mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe003bbd7de x2/sp ffffffe00a45f710 x3/gp ffffffe005d25378 x4/tp ffffffe0207a16c0 x5/t0 ffffffe0067b76b0 x6/t1 ffffffe0067b76b2 x7/t2 0000000000000000 x8/s0 ffffffe00a45f720 x9/s1 0000000000001000 x10/a0 0000000000000020 x11/a1 ffffffffffffffff x12/a2 1ffffffc040f42d9 x13/a3 ffffffe0000f5454 x14/a4 0000000000000004 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe0067b76b2 x18/s2 0000000000000000 x19/s3 ffffffe00592b5f8 x20/s4 ffffffe005d2b218 x21/s5 ffffffe003e2e800 x22/s6 ffffffffffffffff x23/s7 ffffffe0000bbefc x24/s8 ffffffe0067e9568 x25/s9 ffffffe00b4a4d38 x26/s10 0000000000000008 x27/s11 ffffffe00b424000 x28/t3 2fa594ab26638200 x29/t4 ffffffc400cf6ed6 x30/t5 ffffffc400cf6ed7 x31/t6 ffffffe0067b76b3 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000