Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:53688' (ECDSA) to the list of known hosts. 2025/01/22 02:14:23 fuzzer started 2025/01/22 02:14:24 dialing manager at localhost:44689 syzkaller login: [ 62.473834] cgroup: Unknown subsys name 'net' [ 62.615899] cgroup: Unknown subsys name 'cpuset' [ 62.647206] cgroup: Unknown subsys name 'rlimit' [ 69.499367] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.349174] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 02:14:42 syscalls: 203 2025/01/22 02:14:42 code coverage: enabled 2025/01/22 02:14:42 comparison tracing: enabled 2025/01/22 02:14:42 extra coverage: enabled 2025/01/22 02:14:42 setuid sandbox: enabled 2025/01/22 02:14:42 namespace sandbox: enabled 2025/01/22 02:14:42 Android sandbox: enabled 2025/01/22 02:14:42 fault injection: enabled 2025/01/22 02:14:42 leak checking: enabled 2025/01/22 02:14:42 net packet injection: enabled 2025/01/22 02:14:42 net device setup: enabled 2025/01/22 02:14:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 02:14:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 02:14:42 USB emulation: enabled 2025/01/22 02:14:42 hci packet injection: enabled 2025/01/22 02:14:42 wifi device emulation: enabled 2025/01/22 02:14:42 802.15.4 emulation: enabled 2025/01/22 02:14:42 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 02:14:45 starting 8 fuzzer processes 02:14:45 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20004040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x18, {0x9, @bearer=@l2={'eth', 0x3a, 'wg1\x00'}}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r2) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) socketpair(0x23, 0x6, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2c, 0xa, 0x1f, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000001940)=""/221, 0xdd}, {&(0x7f0000001a40)=""/238, 0xee}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/165, 0xa5}, {&(0x7f0000001c40)=""/94, 0x5e}, {&(0x7f0000001cc0)=""/131, 0x83}], 0x9}, 0x59}], 0x1, 0x140, &(0x7f0000001e80)={0x0, 0x989680}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000002000)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xc4, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r12}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r13, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008041) recvmsg$unix(r7, &(0x7f0000002380)={&(0x7f0000002180)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002200)=""/220, 0xdc}], 0x1, &(0x7f0000002340)=[@cred={{0x1c}}], 0x20}, 0x2) ioctl$sock_ifreq(r9, 0x8925, &(0x7f00000023c0)={'batadv0\x00', @ifru_names}) 02:14:45 executing program 5: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x35, &(0x7f0000000100)=0x154, 0x4) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f000000c380)=[{{&(0x7f0000006d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006d80)=""/234, 0xea}, {&(0x7f0000006e80)=""/145, 0x91}, {&(0x7f0000006f40)=""/214, 0xd6}, {&(0x7f0000007040)=""/2, 0x2}], 0x4}, 0x60}, {{&(0x7f00000070c0)=@tipc, 0x80, &(0x7f0000009180)=[{&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/56, 0x38}, {&(0x7f0000008180)=""/4096, 0x1000}], 0x3}, 0x20}, {{&(0x7f00000091c0)=@tipc, 0x80, &(0x7f0000009580)=[{&(0x7f0000009240)=""/193, 0xc1}, {&(0x7f0000009340)=""/140, 0x8c}, {&(0x7f0000009400)=""/147, 0x93}, {&(0x7f00000094c0)=""/154, 0x9a}], 0x4, &(0x7f00000095c0)=""/66, 0x42}, 0x397}, {{&(0x7f0000009640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f000000abc0)=[{&(0x7f00000096c0)=""/178, 0xb2}, {&(0x7f0000009780)=""/144, 0x90}, {&(0x7f0000009840)=""/236, 0xec}, {&(0x7f0000009940)=""/201, 0xc9}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/119, 0x77}, {&(0x7f000000aac0)=""/218, 0xda}], 0x7}, 0x800}, {{&(0x7f000000ac40)=@sco, 0x80, &(0x7f000000ad40)=[{&(0x7f000000acc0)=""/41, 0x29}, {&(0x7f000000ad00)=""/23, 0x17}], 0x2, &(0x7f000000ad80)=""/4096, 0x1000}, 0x3c0d307d}, {{&(0x7f000000bd80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f000000c1c0)=[{&(0x7f000000be00)=""/132, 0x84}, {&(0x7f000000bec0)=""/216, 0xd8}, {&(0x7f000000bfc0)=""/58, 0x3a}, {&(0x7f000000c000)=""/72, 0x48}, {&(0x7f000000c080)=""/121, 0x79}, {&(0x7f000000c100)=""/140, 0x8c}], 0x6}, 0xfe}, {{&(0x7f000000c240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f000000c2c0), 0x0, &(0x7f000000c300)=""/127, 0x7f}, 0x7fffffff}], 0x7, 0x0, &(0x7f000000c540)={0x0, 0x989680}) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f000000c640)={&(0x7f000000c580)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f000000c600)={&(0x7f000000c5c0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xfffffffc}}, [""]}, 0x24}}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f000000c680)="0e6087c239882b940f817d2e08da1f67043851e148a83eefd3073b963b02fdabd4e63aba23d0eea6f09902d87b2d280ddd9dd91920dc67781c06629292e6ab2c8d48a479a889d57802a9fd226cdb968d9eab", 0x52) mount$9p_fd(0x0, &(0x7f000000c700)='./file0\x00', &(0x7f000000c740), 0x804802, &(0x7f000000c780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x63, 0x30, 0x63, 0x64, 0x38, 0x38], 0x2d, [0x36, 0x61, 0x34, 0x9], 0x2d, [0x31, 0x62, 0x34, 0x31], 0x2d, [0x38, 0x37, 0x61, 0x65], 0x2d, [0x38, 0x66, 0x30, 0x37, 0x32, 0x32, 0x36, 0x62]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*'}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[.{@'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f000000c8c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f000000c980)={&(0x7f000000c880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000c940)={&(0x7f000000c900)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f000000c9c0)=[@timestamp], 0x1) r3 = syz_open_dev$rtc(&(0x7f000000ca00), 0x392, 0x420400) ioctl$RTC_AIE_ON(r3, 0x7001) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f000000ca40)=0x4, 0x4) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f000000ca80), 0x210082, 0x0) write$P9_RLERROR(r4, &(0x7f000000cac0)={0x15, 0x7, 0x1, {0xc, 'MODULE_CHECK'}}, 0x15) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f000000cc00)={&(0x7f000000cb00), 0xc, &(0x7f000000cbc0)={&(0x7f000000cb40)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f39958b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce0e53b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff542c0}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b1f51e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d935fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = socket(0x15, 0x800, 0x1) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f000000cd00)={&(0x7f000000cc40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000ccc0)={&(0x7f000000cc80)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'wg0\x00'}}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r6 = memfd_secret(0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f000000e000)={&(0x7f000000df40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000dfc0)={&(0x7f000000df80)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x960b}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x20000000) 02:14:45 executing program 1: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) r0 = getpid() r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000140)="e5501e70cbb4feee9e85da531555c2df3bfdc79d191bb398f707be8e303719f2d85b0ddedd1b6c4499e86a8766b51b2608782eb358d52dd55677733c0744a8636f540446abc791440e80a2e4f1558c45b13ce38c056ddae500866bbb15261edfee2dd0923a8c1bad8fd639178b796a0db165118510b4123d221f0238fe066bb82b1631d026e4b8867a7bd78b9740ea4af9ae5bf8fea20833284bb53e51e593529422cf800edbe6cc5a3ef013e7a0cc0511cfa9", 0xb3}, {&(0x7f0000000200)="f15be0def894127a9cfa8f6fadb13ef9fe7c16f8f48430dea1eccdd05a8b1e4958856d051e8def2a5a44de3d7022ed8fd739b529108c6ea2b3d12a8e239e289ec574", 0x42}, {&(0x7f0000000280)="0b522afdc0f43e4fe9fe68b5c8f824df66a829c3206309218a0190bbfb696005fecc35ad7689770b579422fa20c3b0", 0x2f}, {&(0x7f00000002c0)="b587de846501c7f2a7c2d15fa25ab4ad70fb0506e463f269a87d3e04480394f8504529fe1479ede9b1c27a13edcb3497a6d0472e4881eb758d79935d1ea9b8e272b547d4a4cc152e16aa0a2dcc130fe40d0d7958953751cf63869ed7a4651086277ecca7521018c20e619089a1563c61454ed7d1d46d6d861a494b4f236ed2e5ecf71c1d72ee8854a00255790e2687839c8347a06d5531be4052f8b69d850da16086190b15ea9d5f46c0d72f4332d808374258f88b37e04fe706a7e73548cfba6e2a76da527cfe2b9a7f742f37b5fb7ef7140064a5cc142e579d4fc23fe132a9925884128b943b7f1e90b80c0d10f348b5d87841f9ad", 0xf6}, {&(0x7f00000003c0)="0e16fea7839c7a5ad689fc3064127388312102f6b9134eb8846c251a8c3ab72749eb9b9b95", 0x25}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="9b7b639cf7d9b66b60ea2e71f7ee2240c0fa872e5e99c5da270c39c5833dc79e02e9b39dd101dd79caf1b4e9718aa65ef06f95195e6881af1ffe54ead7e7cc2accef56f65cdc133df039e908c1570bd245e8287c441379f8ae7a59b00cd53ad6346f9575ec31970a30a2a8e947218ef79418db1ae899b0d7110fdb0f692dcdce75a1c6019395222f809aeac3931eb894868b5818a274a86950a5345b26e6e50f9d7207d4b7cbf93389", 0xa9}], 0x7, 0x0, 0x0, 0x5}, 0x4000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000015c0)={0x7, 0x1b, 0x2}, 0x7) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x40804) [ 83.230840] audit: type=1400 audit(1737512085.302:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000001700)=@nl=@proc, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)=""/103, 0x67}, {&(0x7f0000001800)=""/149, 0x95}], 0x2, &(0x7f0000001900)}, 0x7}, {{&(0x7f0000001940)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)=""/43, 0x2b}], 0x1, &(0x7f0000001a40)=""/171, 0xab}, 0x6}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/242, 0xf2}, {&(0x7f0000001c80)=""/184, 0xb8}], 0x2, &(0x7f0000001d80)=""/200, 0xc8}, 0x18}], 0x3, 0x40000001, &(0x7f0000001f40)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x68, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x80) getsockname(r2, &(0x7f0000002100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000002180)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000032c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/230, 0xe6, 0x0, &(0x7f00000022c0)=""/4096, 0x1000}, &(0x7f0000003300)=0x40) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000003340)={0x29, 0x7, 0x1, {{0x1c, '/proc/sys/net/ipv4/tcp_rmem\x00'}, 0x10000}}, 0x29) getsockname(r4, &(0x7f0000003380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000003400)=0x80) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000003440)={0x10, 0x7, 0x2, {{0x3, '}:&'}, 0x51}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000003480)="706886179b01cefed263f008fe67adf3", 0x10) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000034c0)={0x7, 0x21, 0x1}, 0x7) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000003540)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x1}}, @nfc={0x27, 0x0, 0x0, 0x7}, @vsock={0x28, 0x0, 0x2710, @local}, 0xaaa3, 0x0, 0x0, 0x0, 0xe2, &(0x7f0000003500)='netpci0\x00', 0x4, 0x3, 0x81}) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x40800) 02:14:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xff, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8088, 0x8, 0x0, 0x4}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getsa={0x100, 0x12, 0x200, 0x70bd27, 0x25dfdbfc, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2, 0x3c}, [@sec_ctx={0xaf, 0x8, {0xab, 0x8, 0x0, 0x5, 0xa3, "16a780363dddbd79da734bc22ae67f92fa29d57638b35f968cf5073c537b0e3a25cf4533d15d109ed44b36d58b743eb54d4a43fb19e13d03db89e62c0b37a34e18e27ca6aac8f9a52e1f0467cd7c2ae3ee78af20863f617f5c03183f871e977f2cc1a237e96d5611ea7331315496b5dd015b199dcae86d9388c924dd9f2cf70b3e4883fbc5efe3213c3987645db242fc4fbd48a198242ba86fe5a4f5be6f339d018619"}}, @srcaddr={0x14, 0xd, @in6=@local}, @XFRMA_IF_ID={0x8, 0x1f, r0}, @lastused={0xc, 0xf, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'rose0\x00'}}}, ["", "", "", ""]}, 0x2c}}, 0x20040084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r3, &(0x7f0000000480)={0xffffffffffffffff, r4, 0x6}) r5 = socket(0x15, 0x80000, 0x20) r6 = memfd_secret(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f00000004c0)={0x1}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket(0x28, 0x5, 0x7e2) socketpair(0x6, 0x6, 0x7f, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x826}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff6e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x40005) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r8) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r11, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xf5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x40000, 0x0) ioctl$RTC_PLL_SET(r12, 0x40207012, &(0x7f0000000b40)={0x1da1c534, 0x5, 0x6, 0x1f, 0x80, 0x5, 0x9}) 02:14:45 executing program 3: write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x37, 0x1, {0x2, 0x7, 0x2, 0xffffffffffffffff, 0x5, ')*\'&)'}}, 0x23) r0 = memfd_secret(0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) write$P9_RWRITE(r0, &(0x7f0000001080)={0xb, 0x77, 0x1, 0x8}, 0xb) pipe2$9p(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_ROPEN(r1, &(0x7f0000001100)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x2}, 0xd3}}, 0x18) write$P9_RLERROR(r0, &(0x7f0000001140)={0xe, 0x7, 0x1, {0x5, ')*\'&)'}}, 0xe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001180)=[@timestamp, @mss={0x2, 0x6}, @timestamp, @window={0x3, 0x3, 0x3}, @timestamp, @timestamp], 0x6) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000011c0), 0x4) write$P9_RSTATFS(r0, &(0x7f0000001200)={0x43, 0x9, 0x1, {0x400, 0x100, 0x400, 0x9, 0x1, 0x8000, 0x3, 0x1, 0x4}}, 0x43) r2 = memfd_secret(0x0) write$P9_RWSTAT(r2, &(0x7f0000001280)={0x7, 0x7f, 0x2}, 0x7) write$P9_RREMOVE(r0, &(0x7f00000012c0)={0x7, 0x7b, 0x1}, 0x7) write$P9_RCLUNK(r0, &(0x7f0000001300)={0x7, 0x79, 0x2}, 0x7) write$P9_RLERRORu(r0, &(0x7f0000001340)={0xf, 0x7, 0x2, {{0x2, ']+'}, 0x3f}}, 0xf) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001380)) write$P9_RSETATTR(r0, &(0x7f00000013c0)={0x7, 0x1b, 0x1}, 0x7) write$P9_RLCREATE(r2, &(0x7f0000001400)={0x18, 0xf, 0x2, {{0xc0, 0x2}, 0x8}}, 0x18) write$P9_RFLUSH(r1, &(0x7f0000001440)={0x7, 0x6d, 0x1}, 0x7) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000001600)={0x7, 0x15, 0x1}, 0x7) 02:14:45 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000010}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x342b, &(0x7f0000000040)={0x0, 0xacde, 0x10, 0x0, 0x113}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0x98, 0x0, 0x7fffffff, 0x3, 0x1}, 0x5) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x50890) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/188, 0xbc}], 0x1, &(0x7f0000000480)=""/50, 0x32}, 0x1}], 0x1, 0x1, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4804c) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000680)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x1}, 0x2}}, 0x18) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xfffffffb, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x500d0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80020008}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x29, 0x3, 0x40, 0x7ff, 0x0, @empty, @private1, 0x8000, 0x8000, 0x0, 0x1}}) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000009c0)={0x7, 0x79, 0x1}, 0x7) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x8000000) syz_io_uring_setup(0x15fe, &(0x7f0000000a00)={0x0, 0xa3c4, 0x10, 0x0, 0x1b7, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000002140)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000002100)={&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b80)=""/247, 0xf7}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/139, 0x8b}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/170, 0xaa}, {&(0x7f0000000ec0)=""/160, 0xa0}, {&(0x7f0000000f80)=""/247, 0xf7}], 0x7, &(0x7f0000001100)=""/4096, 0x1000}, 0x0, 0x10000, 0x1, {0x2}}, 0xc4) getsockname(0xffffffffffffffff, &(0x7f0000002180)=@rc, &(0x7f0000002200)=0x80) 02:14:45 executing program 6: clock_gettime(0x0, &(0x7f00000089c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/86, 0x56}, {&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/181, 0xb5}], 0x7, &(0x7f0000000580)=""/208, 0xd0}, 0x5}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000001880)=[{&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/62, 0x3e}], 0x4, &(0x7f00000018c0)=""/179, 0xb3}, 0x5}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/222, 0xde}, {&(0x7f0000002b00)=""/143, 0x8f}, {&(0x7f0000002bc0)=""/39, 0x27}, {&(0x7f0000002c00)=""/111, 0x6f}], 0x5}, 0x18}, {{&(0x7f0000002d00)=@rc={0x1f, @none}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d80)=""/23, 0x17}, {&(0x7f0000002dc0)=""/108, 0x6c}], 0x2, &(0x7f0000002e80)=""/69, 0x45}, 0x6}, {{&(0x7f0000002f00)=@caif, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/17, 0x11}, {&(0x7f0000002fc0)=""/213, 0xd5}], 0x2, &(0x7f0000003100)=""/4096, 0x1000}, 0xd994}, {{&(0x7f0000004100)=@in, 0x80, &(0x7f0000006380)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/105, 0x69}, {&(0x7f0000006200)=""/99, 0x63}, {&(0x7f0000006280)=""/234, 0xea}], 0x5}, 0x9}, {{&(0x7f0000006400)=@xdp, 0x80, &(0x7f0000006600)=[{&(0x7f0000006480)=""/70, 0x46}, {&(0x7f0000006500)=""/172, 0xac}, {&(0x7f00000065c0)=""/58, 0x3a}], 0x3}}, {{&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000008700)=[{&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)}, {&(0x7f0000007700)=""/4096, 0x1000}], 0x3, &(0x7f0000008740)=""/114, 0x72}, 0x1}], 0x8, 0x40000020, &(0x7f0000008a00)={r0, r1+60000000}) clock_gettime(0x2, &(0x7f0000008a40)) clock_gettime(0x2, &(0x7f0000008a80)) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000008ac0)=@gcm_256={{0x304}, "fb8bfaf198e2fc07", "610f3a63b67665ca750969dbfe58d2307a2026f22d2d8659a5d9fbf18a9155b3", "5317a4c8", "f36ea192fbce8d86"}, 0x38) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6e19fe240c03d2dc, 0x0, r2, 0x0, 0x0, 0x0, 0x40}, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000008b80)={0x4, &(0x7f0000008b40)=[{0x9, 0x2, 0x1f, 0x5}, {0x6, 0xc5, 0x0, 0xbde}, {0x3, 0x9b, 0x8, 0x3}, {0x9e1, 0x1f, 0x3f, 0x7320a43d}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000008bc0)) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x910, 0xffffffffffffffff, 0x8000000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000008c00)={0x0, 0x9, 0xff}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000008c40), 0x400400, 0x0) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000008c80)) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000008cc0)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000009980)=[{{&(0x7f0000008d00)=@can, 0x80, &(0x7f0000009380)=[{&(0x7f0000008d80)=""/163, 0xa3}, {&(0x7f0000008e40)=""/221, 0xdd}, {&(0x7f0000008f40)=""/151, 0x97}, {&(0x7f0000009000)=""/214, 0xd6}, {&(0x7f0000009100)=""/171, 0xab}, {&(0x7f00000091c0)=""/67, 0x43}, {&(0x7f0000009240)=""/210, 0xd2}, {&(0x7f0000009340)=""/37, 0x25}], 0x8, &(0x7f0000009400)=""/29, 0x1d}, 0x4000}, {{&(0x7f0000009440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000009780)=[{&(0x7f00000094c0)=""/150, 0x96}, {&(0x7f0000009580)=""/243, 0xf3}, {&(0x7f0000009680)=""/194, 0xc2}], 0x3, &(0x7f00000097c0)=""/173, 0xad}, 0x8}, {{0x0, 0x0, &(0x7f00000098c0)=[{&(0x7f0000009880)=""/30, 0x1e}], 0x1, &(0x7f0000009900)=""/106, 0x6a}, 0x9}], 0x3, 0x60, &(0x7f0000009a40)) write$rfkill(r5, &(0x7f0000009a80)={0x9, 0x4, 0x3}, 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000009ac0)=0x6, 0x4) 02:14:45 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/115, 0x73}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x2122) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x5, 0x1, 0x64, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x8000, 0x5}}) r7 = getpid() r8 = getpgrp(r0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r5, &(0x7f0000000680)={0xffffffffffffffff, r9, 0x2}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6_vti0\x00', r6, 0x4, 0x80, 0x5, 0x1, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x4, 0x7}}) r12 = socket(0x27, 0x1, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f00000007c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6gre0\x00', r11, 0x2f, 0x40, 0x0, 0x80000000, 0x2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x337a, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r13, 0x2f, 0x9, 0x0, 0x5, 0x2a, @private2, @empty, 0x10, 0x8000, 0x5, 0x4}}) r14 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r7, 0x7, r4, &(0x7f0000000980)={r14, r1, 0x2}) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r12, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r15, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40010) r16 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r16, &(0x7f0000000b00)={0x1}) [ 84.686385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.691297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.693754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.701493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.707067] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.709983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.757453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.761761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.765705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.771381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.774342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.780351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.782687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.794328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.801382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.808499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.822064] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.837990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.839407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.842292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.850522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.850941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.863270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.866374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.868710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.872806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.874485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.876629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.880557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.883987] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.887721] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.889858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.893522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.895359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.900273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.908710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.909816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.915823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.922734] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.924221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.924824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.929825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.940218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.942915] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.945631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.959816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.973287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.978293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.772038] Bluetooth: hci0: command tx timeout [ 86.835280] Bluetooth: hci2: command tx timeout [ 86.963670] Bluetooth: hci5: command tx timeout [ 86.963743] Bluetooth: hci6: command tx timeout [ 86.964522] Bluetooth: hci7: command tx timeout [ 86.964532] Bluetooth: hci1: command tx timeout [ 87.027250] Bluetooth: hci4: command tx timeout [ 87.028190] Bluetooth: hci3: command tx timeout [ 88.819227] Bluetooth: hci0: command tx timeout [ 88.883222] Bluetooth: hci2: command tx timeout [ 89.011268] Bluetooth: hci1: command tx timeout [ 89.011303] Bluetooth: hci7: command tx timeout [ 89.011366] Bluetooth: hci6: command tx timeout [ 89.011457] Bluetooth: hci5: command tx timeout [ 89.075226] Bluetooth: hci4: command tx timeout [ 89.076378] Bluetooth: hci3: command tx timeout [ 90.868168] Bluetooth: hci0: command tx timeout [ 90.931186] Bluetooth: hci2: command tx timeout [ 91.059408] Bluetooth: hci1: command tx timeout [ 91.059443] Bluetooth: hci5: command tx timeout [ 91.059529] Bluetooth: hci6: command tx timeout [ 91.059536] Bluetooth: hci7: command tx timeout [ 91.123675] Bluetooth: hci3: command tx timeout [ 91.123776] Bluetooth: hci4: command tx timeout [ 92.915479] Bluetooth: hci0: command tx timeout [ 92.979241] Bluetooth: hci2: command tx timeout [ 93.107324] Bluetooth: hci6: command tx timeout [ 93.107467] Bluetooth: hci7: command tx timeout [ 93.107605] Bluetooth: hci5: command tx timeout [ 93.107685] Bluetooth: hci1: command tx timeout [ 93.172167] Bluetooth: hci3: command tx timeout [ 93.172269] Bluetooth: hci4: command tx timeout [ 147.198262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.200879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.204477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.214291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.216981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.219524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.263454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.276615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.278884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.285176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.289967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.290788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.292449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.302543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.308940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.327254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.335928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.343027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.344285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.345149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.345945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.349408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.351793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.354503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.384873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.387429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.388031] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.389408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.393160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.393518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.395481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.396739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.406007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.406879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.415619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.421287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.423806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.428168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.430184] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.430950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.452399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.456211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.456981] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.469933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.476294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.549778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.572611] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.584457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.300204] Bluetooth: hci0: command tx timeout [ 149.363242] Bluetooth: hci1: command tx timeout [ 149.491225] Bluetooth: hci3: command tx timeout [ 149.555151] Bluetooth: hci2: command tx timeout [ 149.555434] Bluetooth: hci6: command tx timeout [ 149.620182] Bluetooth: hci4: command tx timeout [ 149.620460] Bluetooth: hci5: command tx timeout [ 150.323476] Bluetooth: hci7: command tx timeout [ 151.347268] Bluetooth: hci0: command tx timeout [ 151.411403] Bluetooth: hci1: command tx timeout [ 151.539381] Bluetooth: hci3: command tx timeout [ 151.604198] Bluetooth: hci6: command tx timeout [ 151.604379] Bluetooth: hci2: command tx timeout [ 151.667292] Bluetooth: hci5: command tx timeout [ 151.667451] Bluetooth: hci4: command tx timeout [ 152.371608] Bluetooth: hci7: command tx timeout [ 153.397198] Bluetooth: hci0: command tx timeout [ 153.459163] Bluetooth: hci1: command tx timeout [ 153.587221] Bluetooth: hci3: command tx timeout [ 153.651215] Bluetooth: hci6: command tx timeout [ 153.651304] Bluetooth: hci2: command tx timeout [ 153.715271] Bluetooth: hci5: command tx timeout [ 153.715389] Bluetooth: hci4: command tx timeout [ 154.419506] Bluetooth: hci7: command tx timeout [ 155.443459] Bluetooth: hci0: command tx timeout [ 155.507210] Bluetooth: hci1: command tx timeout [ 155.635161] Bluetooth: hci3: command tx timeout [ 155.700151] Bluetooth: hci2: command tx timeout [ 155.700239] Bluetooth: hci6: command tx timeout [ 155.764180] Bluetooth: hci4: command tx timeout [ 155.764267] Bluetooth: hci5: command tx timeout [ 156.468164] Bluetooth: hci7: command tx timeout [ 209.148314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.149627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.150642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.160002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.161898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.164219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.223335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.225441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.226710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.232214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.235259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.236410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.299007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.305625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.310551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.313851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.316438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.317883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.343952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.345855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.346742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.352452] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.356468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.360596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.423470] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.433778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.440290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.443576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.449688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.458906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.473578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.475915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.477317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.478647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.482354] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.483437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.547633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.588234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.590675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.593419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.594747] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.595724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.606427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.618249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.622001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.639253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.661445] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.728587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.187233] Bluetooth: hci0: command tx timeout [ 211.315343] Bluetooth: hci1: command tx timeout [ 211.379882] Bluetooth: hci3: command tx timeout [ 211.380751] Bluetooth: hci2: command tx timeout [ 211.571358] Bluetooth: hci4: command tx timeout [ 211.699290] Bluetooth: hci6: command tx timeout [ 211.763377] Bluetooth: hci5: command tx timeout [ 211.891317] Bluetooth: hci7: command tx timeout [ 213.236408] Bluetooth: hci0: command tx timeout [ 213.363556] Bluetooth: hci1: command tx timeout [ 213.428233] Bluetooth: hci2: command tx timeout [ 213.428331] Bluetooth: hci3: command tx timeout [ 213.620585] Bluetooth: hci4: command tx timeout [ 213.747155] Bluetooth: hci6: command tx timeout [ 213.811328] Bluetooth: hci5: command tx timeout [ 213.940109] Bluetooth: hci7: command tx timeout [ 215.286142] Bluetooth: hci0: command tx timeout [ 215.411412] Bluetooth: hci1: command tx timeout [ 215.475245] Bluetooth: hci3: command tx timeout [ 215.475411] Bluetooth: hci2: command tx timeout [ 215.667460] Bluetooth: hci4: command tx timeout [ 215.796692] Bluetooth: hci6: command tx timeout [ 215.859498] Bluetooth: hci5: command tx timeout [ 215.988284] Bluetooth: hci7: command tx timeout [ 217.332155] Bluetooth: hci0: command tx timeout [ 217.460799] Bluetooth: hci1: command tx timeout [ 217.524162] Bluetooth: hci2: command tx timeout [ 217.524258] Bluetooth: hci3: command tx timeout [ 217.716139] Bluetooth: hci4: command tx timeout [ 217.844109] Bluetooth: hci6: command tx timeout [ 217.908121] Bluetooth: hci5: command tx timeout [ 218.036143] Bluetooth: hci7: command tx timeout [ 269.618248] [ 269.618503] ====================================================== [ 269.619050] WARNING: possible circular locking dependency detected [ 269.619594] 6.13.0-next-20250121 #1 Not tainted [ 269.620035] ------------------------------------------------------ [ 269.620576] kworker/u8:1/66 is trying to acquire lock: [ 269.621041] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.622001] [ 269.622001] but task is already holding lock: [ 269.622519] ffff88800e5c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 269.623424] [ 269.623424] which lock already depends on the new lock. [ 269.623424] [ 269.624406] [ 269.624406] the existing dependency chain (in reverse order) is: [ 269.625147] [ 269.625147] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 269.626225] __mutex_lock+0x13d/0xb50 [ 269.627111] wiphy_register+0x1b2e/0x25d0 [ 269.629832] ieee80211_register_hw+0x23a4/0x3d60 [ 269.631598] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 269.632988] init_mac80211_hwsim+0x389/0x870 [ 269.634147] do_one_initcall+0xf9/0x640 [ 269.635121] kernel_init_freeable+0x53d/0x7a0 [ 269.636274] kernel_init+0x1e/0x2d0 [ 269.637090] ret_from_fork+0x48/0x80 [ 269.637980] ret_from_fork_asm+0x1a/0x30 [ 269.639011] [ 269.639011] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 269.640233] __lock_acquire+0x29fd/0x4580 [ 269.641178] lock_acquire+0x19b/0x520 [ 269.642089] __mutex_lock+0x13d/0xb50 [ 269.642954] unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.644138] unregister_netdevice_queue+0x224/0x2e0 [ 269.645285] _cfg80211_unregister_wdev+0x57b/0x700 [ 269.646575] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 269.647850] ieee80211_unregister_hw+0x55/0x3a0 [ 269.649081] hwsim_exit_net+0x3a0/0x730 [ 269.650169] ops_exit_list+0xb3/0x180 [ 269.651199] cleanup_net+0x546/0xad0 [ 269.652237] process_one_work+0x8ee/0x1a10 [ 269.653399] worker_thread+0x674/0xe70 [ 269.654504] kthread+0x3ab/0x720 [ 269.655477] ret_from_fork+0x48/0x80 [ 269.656498] ret_from_fork_asm+0x1a/0x30 [ 269.657634] [ 269.657634] other info that might help us debug this: [ 269.657634] [ 269.659354] Possible unsafe locking scenario: [ 269.659354] [ 269.660687] CPU0 CPU1 [ 269.661683] ---- ---- [ 269.662590] lock(&rdev->wiphy.mtx); [ 269.663621] lock(rtnl_mutex); [ 269.664908] lock(&rdev->wiphy.mtx); [ 269.666246] lock(rtnl_mutex); [ 269.667004] [ 269.667004] *** DEADLOCK *** [ 269.667004] [ 269.668129] 4 locks held by kworker/u8:1/66: [ 269.668929] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 269.670824] #1: ffff88800ec5fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 269.672635] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 269.674375] #3: ffff88800e5c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 269.676351] [ 269.676351] stack backtrace: [ 269.677186] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250121 #1 [ 269.678678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 269.680161] Workqueue: netns cleanup_net [ 269.680951] Call Trace: [ 269.681429] [ 269.681866] dump_stack_lvl+0xca/0x120 [ 269.682660] print_circular_bug+0x47b/0x750 [ 269.683494] check_noncircular+0x2e9/0x3c0 [ 269.684294] ? __pfx_check_noncircular+0x10/0x10 [ 269.685193] ? hlock_class+0x4e/0x130 [ 269.685917] ? mark_lock+0xac/0xed0 [ 269.686634] ? srso_return_thunk+0x5/0x5f [ 269.687467] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 269.688356] ? lockdep_lock+0xba/0x1b0 [ 269.689144] ? __pfx_lockdep_lock+0x10/0x10 [ 269.690013] __lock_acquire+0x29fd/0x4580 [ 269.690837] ? __pfx___lock_acquire+0x10/0x10 [ 269.691705] ? lock_release+0x20f/0x6f0 [ 269.692504] ? __pfx_lock_release+0x10/0x10 [ 269.693343] lock_acquire+0x19b/0x520 [ 269.694089] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.695191] ? __pfx_lock_acquire+0x10/0x10 [ 269.696033] ? srso_return_thunk+0x5/0x5f [ 269.696862] ? lock_release+0x20f/0x6f0 [ 269.697637] ? srso_return_thunk+0x5/0x5f [ 269.698498] ? lock_is_held_type+0x9e/0x120 [ 269.699386] ? srso_return_thunk+0x5/0x5f [ 269.700252] __mutex_lock+0x13d/0xb50 [ 269.701040] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.702151] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.703213] ? srso_return_thunk+0x5/0x5f [ 269.704027] ? synchronize_rcu_expedited+0x38a/0x420 [ 269.704959] ? __pfx___mutex_lock+0x10/0x10 [ 269.705827] ? __pfx_autoremove_wake_function+0x10/0x10 [ 269.706978] ? srso_return_thunk+0x5/0x5f [ 269.707980] ? kasan_quarantine_put+0x84/0x1e0 [ 269.709026] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 269.709987] ? srso_return_thunk+0x5/0x5f [ 269.710975] unregister_netdevice_many_notify+0x1612/0x1c80 [ 269.712234] ? __virt_addr_valid+0x2e8/0x5d0 [ 269.713234] ? __pfx_lock_release+0x10/0x10 [ 269.714172] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 269.715432] ? find_held_lock+0x2c/0x110 [ 269.716401] ? srso_return_thunk+0x5/0x5f [ 269.717415] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 269.718627] ? srso_return_thunk+0x5/0x5f [ 269.719644] ? lock_release+0x20f/0x6f0 [ 269.720591] ? __pfx_lock_release+0x10/0x10 [ 269.721528] ? srso_return_thunk+0x5/0x5f [ 269.722494] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 269.723534] ? srso_return_thunk+0x5/0x5f [ 269.724436] unregister_netdevice_queue+0x224/0x2e0 [ 269.725576] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 269.726788] ? up_write+0x195/0x520 [ 269.727656] _cfg80211_unregister_wdev+0x57b/0x700 [ 269.728821] ? srso_return_thunk+0x5/0x5f [ 269.729840] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 269.730988] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 269.732224] ? srso_return_thunk+0x5/0x5f [ 269.733213] ? srso_return_thunk+0x5/0x5f [ 269.734218] ? synchronize_rcu+0x1ff/0x260 [ 269.735197] ieee80211_unregister_hw+0x55/0x3a0 [ 269.736297] hwsim_exit_net+0x3a0/0x730 [ 269.737253] ? __pfx_hwsim_exit_net+0x10/0x10 [ 269.738314] ? srso_return_thunk+0x5/0x5f [ 269.739346] ? netdev_run_todo+0x788/0x1040 [ 269.740380] ? srso_return_thunk+0x5/0x5f [ 269.741432] ? __pfx_hwsim_exit_net+0x10/0x10 [ 269.742487] ops_exit_list+0xb3/0x180 [ 269.743407] cleanup_net+0x546/0xad0 [ 269.744334] ? __pfx_cleanup_net+0x10/0x10 [ 269.745373] process_one_work+0x8ee/0x1a10 [ 269.746430] ? __pfx_lock_acquire+0x10/0x10 [ 269.747441] ? __pfx_process_one_work+0x10/0x10 [ 269.748587] ? srso_return_thunk+0x5/0x5f [ 269.749517] ? move_linked_works+0x172/0x270 [ 269.750488] ? srso_return_thunk+0x5/0x5f [ 269.751420] ? assign_work+0x196/0x240 [ 269.752341] worker_thread+0x674/0xe70 [ 269.753225] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 269.754389] ? srso_return_thunk+0x5/0x5f [ 269.755347] ? __pfx_worker_thread+0x10/0x10 [ 269.756349] kthread+0x3ab/0x720 [ 269.757132] ? __pfx_kthread+0x10/0x10 [ 269.757989] ? srso_return_thunk+0x5/0x5f [ 269.758902] ? finish_task_switch.isra.0+0x206/0x840 [ 269.760000] ? __pfx_kthread+0x10/0x10 [ 269.760871] ret_from_fork+0x48/0x80 [ 269.761656] ? __pfx_kthread+0x10/0x10 [ 269.762529] ret_from_fork_asm+0x1a/0x30 [ 269.763468] [ 271.229939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.235917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.237983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.242636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.246405] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.251535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.295391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.297479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.302551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.305688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.310818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.312399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.359438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.365490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.374448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.390565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.393026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.395794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.427412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.436501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.464357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.470353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.472480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.476742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.513234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.515720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.517694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.520244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.522260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.523911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.575135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.578215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.588467] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.590506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.594492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.600851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.631709] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.636433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.636984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.650320] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.651545] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.657312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.657716] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.664810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.673599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.705142] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.709401] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.722755] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.331157] Bluetooth: hci1: command tx timeout [ 273.331797] Bluetooth: hci0: command tx timeout [ 273.459154] Bluetooth: hci2: command tx timeout [ 273.587206] Bluetooth: hci4: command tx timeout [ 273.590144] Bluetooth: hci3: command tx timeout [ 273.715414] Bluetooth: hci5: command tx timeout [ 273.716771] Bluetooth: hci6: command tx timeout [ 273.779127] Bluetooth: hci7: command tx timeout [ 275.379127] Bluetooth: hci0: command tx timeout [ 275.379199] Bluetooth: hci1: command tx timeout [ 275.507112] Bluetooth: hci2: command tx timeout [ 275.635124] Bluetooth: hci3: command tx timeout [ 275.635147] Bluetooth: hci4: command tx timeout [ 275.763126] Bluetooth: hci6: command tx timeout [ 275.763208] Bluetooth: hci5: command tx timeout [ 275.827081] Bluetooth: hci7: command tx timeout [ 277.427165] Bluetooth: hci1: command tx timeout [ 277.428219] Bluetooth: hci0: command tx timeout [ 277.555141] Bluetooth: hci2: command tx timeout [ 277.683194] Bluetooth: hci3: command tx timeout [ 277.684352] Bluetooth: hci4: command tx timeout [ 277.811240] Bluetooth: hci5: command tx timeout [ 277.811258] Bluetooth: hci6: command tx timeout [ 277.875319] Bluetooth: hci7: command tx timeout [ 279.475103] Bluetooth: hci0: command tx timeout [ 279.476169] Bluetooth: hci1: command tx timeout [ 279.603072] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 02:17:51 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ec5eb38 R8 =0000000000000001 R9 =ffffed1001d8bd57 R10=0000000000000037 R11=3064353278302020 R12=0000000000000037 R13=0000000000000001 R14=ffff888008fea00a R15=ffff88800ec5ee38 RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055641f33afb0 CR3=000000000e418000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=000055a46c512060000055a46c4f5ef0 XMM06=000055a46c4f149000000002ffffffff XMM07=00000000000000000000000000000000 XMM08=0000000000000031000055a46c4f7300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11001e18fa7 RCX=ffffffff8150243e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=0000000000000001 RSP=ffff88800f0c7d28 R8 =0000000000000000 R9 =fffffbfff0c80afa R10=ffffffff864057d7 R11=0000000000000001 R12=ffff888015bfbcd0 R13=ffffffff81aefa2c R14=000000000003a64c R15=ffff888035621680 RIP=ffffffff8150289a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f10ac13da88 CR3=000000002c90c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000003ffffffff000055a46c4e4c20 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055a46c4c9240000055a46c5163b0 XMM06=00000000000000000000000300000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000