Warning: Permanently added '[localhost]:36749' (ECDSA) to the list of known hosts.
2025/04/27 08:05:53 fuzzer started
2025/04/27 08:05:53 dialing manager at localhost:46629
syzkaller login: [   94.369885] cgroup: Unknown subsys name 'net'
[   94.505837] cgroup: Unknown subsys name 'cpuset'
[   94.544900] cgroup: Unknown subsys name 'rlimit'
2025/04/27 08:06:16 syscalls: 202
2025/04/27 08:06:16 code coverage: enabled
2025/04/27 08:06:16 comparison tracing: enabled
2025/04/27 08:06:16 extra coverage: enabled
2025/04/27 08:06:16 setuid sandbox: enabled
2025/04/27 08:06:16 namespace sandbox: enabled
2025/04/27 08:06:16 Android sandbox: enabled
2025/04/27 08:06:16 fault injection: enabled
2025/04/27 08:06:16 leak checking: enabled
2025/04/27 08:06:16 net packet injection: enabled
2025/04/27 08:06:16 net device setup: enabled
2025/04/27 08:06:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 08:06:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 08:06:16 USB emulation: enabled
2025/04/27 08:06:16 hci packet injection: enabled
2025/04/27 08:06:16 wifi device emulation: enabled
2025/04/27 08:06:16 802.15.4 emulation: enabled
2025/04/27 08:06:16 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 08:06:18 starting 8 fuzzer processes
08:06:18 executing program 0:
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0x5, 0x74, 0xfffffff9, 0x7fffffff})
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000040)={{0x3, 0x2, 0x40ca, 0x3, 0x1c, 0x9}, 0x399, [0x0, 0xffff, 0x7, 0x6240, 0x3, 0x7f, 0x0, 0x5, 0xfffff801, 0x1, 0x9, 0x7, 0x0, 0x9, 0x48, 0x738f, 0x8, 0x7f, 0xfffffffa, 0xae2, 0x100, 0x2, 0x7fffffff, 0xec60, 0x3, 0x2e63e122, 0x8d, 0x64, 0x3, 0x80, 0x6e, 0x0, 0xfff, 0x7, 0x2, 0x6, 0x3, 0x100, 0x5, 0xc4, 0x4, 0x1, 0x6, 0xff, 0x81, 0xfffeffff, 0x7fff, 0x2, 0x6, 0x10001, 0x8001, 0xcecd, 0x5, 0x0, 0x2, 0x3, 0x32, 0x1, 0x1, 0xffffffff, 0x7, 0x8, 0xffffffff, 0xfffffbff, 0x0, 0x88, 0x81, 0x4, 0x6, 0x7, 0xffff6b54, 0x4c0, 0x6, 0x2, 0x0, 0x101, 0x9435, 0x3, 0x3f, 0x3, 0xffff, 0x1, 0x0, 0xfffffffc, 0x101, 0x80000000, 0x1, 0x1, 0x101, 0x1, 0x1, 0x6be5, 0x7, 0x7, 0xff, 0x7f, 0x4, 0x0, 0x4, 0x2, 0x9, 0x9, 0x800, 0x0, 0x65c5, 0x1, 0x35, 0x1, 0x6, 0x4, 0x101, 0x290, 0x6, 0x2, 0xe9, 0x2, 0x8, 0x101, 0x3, 0x9, 0x4, 0x864d1bc7, 0x0, 0x8, 0xffff, 0x2, 0x86, 0x0, 0x7f, 0x1, 0x1, 0x9, 0x1, 0x8001, 0x23, 0x6, 0x65c460ce, 0x10000, 0xe712, 0x8001, 0x1000, 0x8, 0x5d, 0x2, 0x5, 0x400, 0xb93d, 0x7f, 0x4a58, 0x1, 0x7, 0x4, 0x0, 0x3, 0x4, 0x101, 0x80000000, 0x5, 0x0, 0x3, 0x8, 0x0, 0xfffffff7, 0x7fffffff, 0x7, 0x1, 0x10000, 0x7, 0x11a6, 0x7, 0xfff, 0xfffffc00, 0x6, 0x1ff, 0x2, 0x4, 0x3, 0x10000, 0x2, 0x1f, 0x0, 0x6, 0x3, 0x200, 0x401, 0x8, 0xfca, 0x3f, 0x4, 0x2, 0x2, 0x8, 0x64, 0x7fff, 0x109, 0x258, 0x8, 0x4000000, 0x9e, 0x20, 0x81, 0x81, 0x7, 0x3, 0x1, 0x80000001, 0x9, 0x0, 0x5, 0x20, 0x9, 0x7, 0x4, 0x707, 0x682f, 0x2, 0x1, 0x1000, 0x3, 0x4, 0x5, 0x76b, 0x0, 0xfffffffb, 0x80000000, 0x8, 0x401, 0x7, 0x7c8, 0x9, 0x0, 0x7fff, 0x88, 0x6, 0x10001, 0xffffffa8, 0x101, 0x1ff, 0x1f, 0x7, 0x401, 0x80000001, 0x0, 0x400, 0x7, 0xc2, 0x7fffffff, 0x9, 0x1ff, 0x3, 0x5, 0x6, 0x40, 0x5, 0x8000, 0x6, 0x1, 0x1, 0x5, 0x200, 0x6e05cc45, 0x9, 0x6, 0x5, 0x80000001, 0x9, 0x9, 0x9, 0x1, 0x7, 0x4, 0x3, 0x9, 0x10000, 0x3f, 0x8, 0x1f, 0x1ff, 0x8000, 0x8, 0x9, 0x4, 0x800, 0x800, 0xfc, 0x6, 0x21, 0x8, 0x1f, 0x8000, 0x5, 0x10001, 0xff, 0x9, 0x0, 0x4, 0x33f21a53, 0x94d, 0x9, 0x7, 0xb5, 0xf9, 0x0, 0x101, 0x4, 0x8000, 0x5b21, 0x8000, 0x9, 0x5, 0x1, 0x5ec00e88, 0x9, 0x6, 0x6, 0xb76831ef, 0x80000001, 0xffffffd5, 0x800, 0x5, 0x6, 0xffffffff, 0x3, 0xffffffff, 0x3, 0xccc, 0x2, 0x2, 0xdd4, 0x3, 0x81, 0x200, 0x9, 0x0, 0x7f, 0x1, 0x9, 0x5, 0x1, 0x8, 0xffffffff, 0xb55, 0x8, 0x3, 0x41f, 0x8, 0x7, 0x2, 0x81, 0x4, 0x0, 0x9, 0x7fffffff, 0xa87, 0x5, 0xf7, 0x6, 0x10, 0x5, 0x10001, 0xc1, 0x1, 0x3ff, 0x4, 0x1ff, 0x4, 0x80000001, 0x0, 0x9, 0x4ae80000, 0xadb2, 0x6, 0x8, 0x3ff, 0x616, 0x5, 0x5, 0x0, 0x3, 0x8001, 0x400, 0x18, 0x10001, 0xce3, 0x80000001, 0xfc7, 0x12b6, 0xbb, 0x7, 0x101, 0x8000, 0x1ff, 0x10001, 0xfffffffe, 0x139c, 0x5, 0x7fffffff, 0x4, 0x4e8, 0xfb, 0xffffffff, 0x400, 0x8, 0xf82, 0x6, 0x1, 0x8, 0x6, 0x9, 0x480000, 0x0, 0xb96, 0x9, 0x2, 0x7fff, 0x400, 0x2, 0x400, 0xff, 0x80, 0x0, 0x8, 0x3, 0xa, 0x9, 0x2, 0x800, 0x1, 0x6, 0x80000000, 0x80000001, 0x5323, 0x1, 0x21c, 0xfffff000, 0x1, 0x101, 0x0, 0xffffff81, 0x1, 0x7, 0x2, 0x1, 0x7, 0x4, 0x6, 0x4, 0xe26, 0x1, 0x0, 0x2, 0x81, 0x1000, 0x80000000, 0x8, 0x5, 0x3e0, 0xa1, 0x7ff, 0x1, 0x8, 0x1, 0x3, 0x4, 0x0, 0x9b3, 0x2, 0x1, 0x800, 0x1, 0x40, 0x8, 0x9, 0x0, 0x1, 0x6, 0x6, 0x8, 0x2d7, 0x7fff, 0x1000, 0x8, 0x1c, 0xab17, 0x6, 0x6, 0x40, 0x0, 0x1, 0x3ff, 0x25, 0x6, 0xc5a, 0xd16e, 0x3, 0x0, 0xd2f3, 0x8001, 0x56a2, 0x80000001, 0x9, 0x7f, 0x80000001, 0x3fc00, 0x4, 0xffff, 0x8, 0x9, 0x8, 0x1, 0xf6b8, 0x1, 0x6, 0xe0f8247, 0x7, 0x8, 0xff, 0xd6, 0x5938, 0x7fffffff, 0x7316, 0x1, 0x3ff, 0x800, 0x8, 0x1, 0x20, 0x400, 0x9, 0x7f, 0x8a, 0x291f8571, 0x1000, 0x0, 0xff, 0x3, 0x4f1, 0x40, 0x79e, 0x9, 0x0, 0x3, 0x6, 0x71e7, 0x8, 0x8, 0x7, 0xffff, 0x8, 0x6, 0x521, 0x3, 0x3, 0x2820, 0x5, 0x5ad, 0x0, 0x7, 0x3, 0x4, 0x3f, 0x9, 0x8dcb, 0x10, 0x800, 0x7fff, 0x9, 0xfff00000, 0xffff, 0x7ff, 0x0, 0x7f, 0x9, 0x3, 0x9, 0x8, 0x10, 0x9, 0x2, 0x6, 0x0, 0xa0000, 0xcc, 0x1, 0x4, 0x0, 0x4, 0x1, 0x800, 0x6b3, 0x20, 0x7fffffff, 0x401, 0x8, 0x1f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x7fffffff, 0xff, 0x80000001, 0x7, 0x2d000000, 0xfffffff9, 0x5, 0x8, 0x7fff, 0x4, 0xffffff7f, 0x8a8, 0x7, 0xfff, 0x3f, 0x30000, 0x59, 0xf8e, 0x3, 0xadfa, 0x80, 0x8, 0x10001, 0x1f, 0x7, 0x7, 0x2, 0x5, 0x840, 0x1, 0x0, 0x1d, 0x8, 0x6, 0x1, 0x101, 0x2, 0x8, 0xb86, 0x5, 0x3ff, 0x2f, 0x5, 0xfff, 0xfffffff7, 0xac53, 0x5, 0x85a, 0x1, 0x9, 0x7, 0x275f, 0x2, 0x3, 0xff, 0x1, 0x1000, 0xdf, 0x5, 0x6, 0x100, 0x2, 0x2, 0xfffffffb, 0x5, 0x800, 0x6, 0x0, 0x8, 0x0, 0x0, 0x2, 0x9, 0x1, 0x4, 0x80000000, 0x3, 0x3, 0x3, 0x7, 0x8001, 0x1f, 0x4, 0x9e, 0x5, 0x48db, 0x1000, 0x4, 0x8, 0x6, 0x6, 0x299f, 0x0, 0x5, 0x0, 0x44ec, 0x2, 0x7ff, 0x9, 0x4, 0x2, 0xfffff800, 0x1, 0x28d, 0x5, 0x6, 0x10001, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6125, 0x9, 0x7, 0xbaad, 0x6ee, 0x80, 0xe808, 0x3, 0x3, 0x8000, 0xbc, 0x101, 0x3f, 0x5, 0xfffffffc, 0x7, 0x9, 0x1, 0x8, 0xa8, 0x0, 0x3, 0x3f, 0x6, 0x400, 0x80000000, 0x8, 0x2, 0xd4, 0x7, 0x9, 0x5, 0xfff, 0x7fff, 0x7790, 0x9, 0x20, 0x4, 0xba, 0x2c, 0x4, 0xa0000, 0x0, 0x7, 0x2, 0xaf, 0x515a3e5b, 0x1, 0x80, 0xff, 0xffff, 0x2c, 0xfff, 0x7, 0x3000000, 0x0, 0x81, 0x7a1, 0x80000000, 0x3, 0x3, 0xfffffffe, 0x10000, 0x4, 0x0, 0x4d, 0x10000, 0x4, 0x1, 0x2, 0xfff, 0xb00e, 0x3ff, 0x1, 0xffff, 0xfff, 0x7, 0x8, 0x6, 0x4c, 0x1, 0x8, 0x5, 0x9, 0x80000000, 0x1000, 0xa, 0x5, 0x10001, 0xffffff80, 0x6, 0x3, 0xb95, 0x8, 0x3ff, 0x7ff, 0x81, 0x8001, 0x401, 0x3, 0xffff, 0x4, 0xed3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x10000000, 0x886, 0xdaae0000, 0x2, 0x38, 0x7fffffff, 0x80000001, 0x3, 0x6, 0x0, 0x7, 0x3, 0xe2, 0x5, 0xffff, 0x6, 0x46, 0x5, 0x3, 0x0, 0x3, 0x93a2, 0x101, 0x0, 0x7ff, 0x8, 0x9d14, 0x400, 0x6, 0xbf, 0x401, 0x40000000, 0x9, 0xd8, 0x8, 0x2, 0x9, 0x0, 0xb7, 0x4, 0x4, 0xfe000000, 0x9, 0x2, 0x4800000, 0x4, 0x7, 0x1e0d, 0x2, 0x2, 0x0, 0x80000000, 0x9721043, 0x1000, 0x30, 0x8001, 0x8, 0x602, 0x7193, 0x8, 0x6, 0x2, 0x80000001, 0xa187, 0x8, 0x0, 0x5, 0xfffffffb, 0xffff3920, 0x2, 0x3, 0x8, 0x7, 0x0, 0x4, 0xb662, 0x84a5, 0x9, 0x44, 0x200, 0x20, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x1, 0x2, 0x0, 0x3e, 0x6, 0x8, 0xa8c0, 0x64c5, 0x2f, 0x759b, 0x0, 0xf, 0x10001, 0x0, 0x7, 0x1, 0xf85d, 0x2, 0x5, 0xf13, 0x0, 0x10000, 0x3, 0x6, 0x7, 0x9, 0x3, 0x2, 0x401, 0x0, 0x4, 0x7, 0xd0f7, 0x3ff, 0x0, 0x7f, 0x2, 0x2, 0xfffffffd, 0xff, 0x10000, 0x0, 0x80, 0x5, 0x5, 0x7fffffff, 0x80000000, 0xfff, 0xff, 0x800, 0x8bc, 0x8, 0x7, 0x9, 0x27, 0x7, 0xeaf, 0x6, 0xfff, 0x5, 0x5, 0x7, 0x0, 0x51, 0x51d, 0x400, 0x2, 0x3, 0x401, 0x80000000, 0x0, 0xfffffff9, 0xffff, 0x9, 0x7, 0x5, 0x81, 0x7ff, 0xfffffff7, 0x7, 0x2, 0x8, 0x40, 0x200, 0xff, 0x8, 0x2, 0x400, 0x3f, 0x9, 0x1, 0x9, 0x101, 0xfd, 0x9, 0x1f, 0x9, 0x2, 0x100, 0x3, 0x0, 0x1000, 0x1ff, 0x5, 0x401, 0x4, 0x8, 0xc820, 0x0, 0x3, 0x2556, 0x4, 0x5, 0x3f, 0x1, 0x4, 0x80]})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x4000, 0x0)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000010c0)={0x1, 0x2})
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
write$P9_RREAD(r0, &(0x7f0000001100)={0x12, 0x75, 0x2, {0x7, "f7e5726d3bf029"}}, 0x12)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000001180), 0x800, 0x800)
write$P9_ROPEN(r2, &(0x7f00000011c0)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x3}, 0x433}}, 0x18)
r3 = syz_open_dev$hiddev(&(0x7f0000001200), 0x9, 0x705880)
ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001240))
pipe2$9p(&(0x7f0000001280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
write$P9_RWALK(r4, &(0x7f00000012c0)={0x7e, 0x6f, 0x1, {0x9, [{0x10, 0x2, 0x7}, {0xa, 0x2, 0x2}, {0x80, 0x0, 0x7}, {0x2, 0x4, 0x3}, {0x8, 0x4}, {0x20, 0x0, 0x6}, {0x44, 0x2, 0x4}, {0x8, 0x0, 0x5}, {0x8, 0x4, 0x8}]}}, 0x7e)
write$P9_RREAD(r2, &(0x7f0000001340)={0x76, 0x75, 0x2, {0x6b, "747a2fd2f77b7c918ad7541566af2405e906b2a0d5af5c76372992d1f1185c604baf9ae57e09e3de41189bba0e4bb06510f9cb285f719e04e0ee1ba2a88a37eb935daf83947805a05f2ba4a8ef7e7f8f3d9950903d09abbc57a11da0b1bfab29c69a499da029bb636e1169"}}, 0x76)
write$P9_RMKDIR(r2, &(0x7f00000013c0)={0x14, 0x49, 0x1, {0x0, 0x3, 0x5}}, 0x14)
openat$cgroup_pressure(r1, &(0x7f0000001400)='memory.pressure\x00', 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x8000, 0x0)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000001480))
write$9p(0xffffffffffffffff, &(0x7f00000014c0)="4c75fd36c9fd84504cdf360fb51e19f115cc534116e45e738bad400c0031dd9515e9ab06fe7203dd2be46908e34fb4539de3f30ec59c3fa97fc1ef820fe0525e1378b553888f151386be75c2dc5ce6267c089b2884b737b6809d3402ce4f844235a5c43a5ab1d7bc26287e1abdd35c506cab8ce14db7e1d4e83ba4ec09b36ccf334a7bae367973c0a3bed8b0a2d7abdd7ee48584d7caa8767802f2943ddc9f328ebf4c0fe3e284fd671ec8fddb438eaa6c73b72c61da4cf7f9a94be55742044a6bf4527abfe34202f5b05ce89f04bafb236bcebf5571b8355d3c8a012915d81e3c96ee0b65cc6c97aecc116c2c58efa61b44dc8fd77d02ff31d6", 0xfa)

08:06:18 executing program 1:
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000))
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000040)={0xffff8001, 0x91, 0x400, 0x7f})
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r2 = socket(0x1, 0x800, 0x80000001)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000200)={{0x3, 0x2, 0x2ac1, 0x4, 0x800, 0x900000}, 0xe7, [0x7, 0x2, 0xbb, 0x5, 0xfffffffa, 0x8000, 0x9, 0x40, 0x2, 0x20, 0x7, 0x8, 0x2, 0x6a5f, 0x95, 0xffffffff, 0x3, 0x3, 0x9, 0x7fffffff, 0x8, 0x7, 0x2, 0x6, 0x80, 0x4, 0x0, 0x0, 0xb8, 0x800, 0x2, 0x2, 0x2, 0x10000, 0x8, 0x8001, 0x2, 0x8, 0x8, 0x82a, 0x8, 0xed, 0xffff, 0x1000, 0x80, 0x8000, 0x7, 0x7, 0x9, 0x100, 0x3ff, 0x0, 0x9, 0x0, 0x704d9174, 0x8, 0x9646, 0x101, 0x3, 0x800, 0x9, 0x3f, 0x1, 0x80000000, 0x76233ab2, 0x7, 0x0, 0xe2, 0xffffffc0, 0x4, 0x3a, 0x38, 0x7fffffff, 0x7bc, 0xbe3, 0x2, 0xffffffe1, 0x7, 0x6, 0x7, 0x1, 0x1ff, 0x7, 0x2, 0x7, 0xc5, 0x3a, 0x4, 0x6, 0x5, 0x4, 0x81, 0x0, 0x5, 0x0, 0xffff, 0x4, 0x9, 0x5, 0x8, 0x6, 0x1000, 0x10001, 0xd5e, 0x4, 0x7ff, 0x7, 0x5, 0x80000001, 0x1, 0x7fffffff, 0x7, 0x0, 0x1000, 0x7, 0xffffccc9, 0x53, 0x0, 0xfffffffd, 0x4, 0x1, 0x2, 0x8, 0x2, 0xffffffe0, 0x6affb8a6, 0x80000001, 0x9, 0x200, 0x3f, 0x7ff, 0x10000, 0xd4, 0x4, 0x1ff, 0xfd, 0x8, 0x101, 0x1, 0x42, 0x7, 0x3, 0x8001, 0x2, 0xfffff9a9, 0x287, 0x401, 0x4, 0x5, 0x10001, 0x80000001, 0x6, 0x200, 0x20, 0x9, 0x0, 0x6, 0xfff, 0xf0e, 0x4, 0x2, 0x6ee, 0x1, 0x40, 0x64e4, 0x0, 0x8, 0x9, 0x1f, 0x5, 0x4, 0x4, 0x7fffffff, 0x6, 0xfffffff9, 0x40, 0xfffffffd, 0x400, 0x1000, 0x9, 0x52c8, 0x5, 0x7f, 0x7000000, 0x10000, 0xe6d, 0x4, 0x81, 0x9, 0x8001, 0x5a, 0x0, 0x7, 0x20000000, 0x2, 0x800, 0x99, 0x71, 0x1ff, 0x0, 0xf34, 0x9, 0xfffffffd, 0x8001, 0x1, 0x8, 0x0, 0x5, 0x0, 0x400, 0x8, 0x5, 0x80, 0xf9de, 0x20000000, 0x6, 0x69, 0xfffff001, 0x9, 0xfffffffe, 0x7, 0x2, 0x342, 0x3, 0x6, 0x9, 0x7, 0x7fffffff, 0x3, 0xffffffff, 0x9, 0x80, 0x12, 0x8001, 0x4, 0x8, 0x3, 0x8, 0x7, 0xdf, 0xffffffff, 0x6, 0x9, 0x0, 0x32d7120c, 0x6, 0xcd, 0x0, 0x60ff, 0x8b6, 0xffff, 0x8, 0x3, 0x7, 0x6, 0x20, 0x5, 0x100, 0x1000, 0x19f5bca0, 0x8, 0x20, 0x8, 0x4b, 0xffe0000, 0x6, 0x1, 0x1f, 0xd89, 0x3, 0x7fffffff, 0xa58, 0x0, 0x0, 0x2, 0x3, 0x2, 0xff, 0x9, 0x9, 0x6, 0x5, 0x4, 0x1, 0x3ff, 0x1, 0x99, 0xfff, 0xfffffca0, 0x10001, 0x7, 0x3, 0x6, 0x31, 0xd00000, 0x5, 0x4, 0x3, 0xffffffff, 0x200, 0x3f, 0x7, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x80, 0x40, 0x5, 0x1, 0x8, 0x4, 0x8, 0x1dfc, 0x72, 0x4, 0x3, 0x2, 0x330e, 0x438, 0x5, 0x6, 0x7, 0xf4cd, 0x1ff, 0xfffffffc, 0x8, 0x4, 0xffff7fff, 0x200, 0xe5, 0x7ff, 0x0, 0x9, 0x2, 0xfffff234, 0x80000000, 0x2, 0xffffffff, 0x5e64, 0x2, 0x4, 0x80000000, 0x7f, 0x8, 0x8, 0x6, 0x8, 0x3, 0x3, 0x81, 0x8b8, 0x48f1, 0x4, 0x3, 0x2b2, 0xfffffbe2, 0x401, 0x1, 0x7ff, 0x2, 0x7, 0x7f, 0x3f, 0x100, 0xfffffffc, 0x3, 0x80, 0x5b, 0x9, 0xe6, 0x7ff, 0x5ba, 0x7ff, 0x6, 0xfffffff8, 0xfb7b, 0x7, 0x1, 0x7ff, 0xffffffe1, 0x4, 0x8, 0x34, 0x3, 0xbee, 0x6, 0xf83f, 0x40, 0x7, 0x1, 0x1, 0x5, 0x6, 0x1, 0x10001, 0x1, 0x4, 0x29, 0x10000, 0xfffffffc, 0x10001, 0x4, 0xf6e, 0x2, 0xffffff01, 0x7, 0x5, 0x7, 0xa472, 0xfffffffb, 0x2, 0x80000000, 0x6, 0x2, 0x508, 0x1, 0x10000, 0x5, 0x291, 0x5, 0xfffffffb, 0x19d7, 0x2, 0x80000001, 0x2, 0x2, 0x973c, 0x5, 0x6, 0x43, 0x2, 0x4e, 0x8fb5, 0x1, 0x4, 0x2, 0xff, 0x58025c67, 0x40, 0x9, 0x3, 0x80000001, 0xffffffff, 0x7fff, 0x8, 0x800, 0x7, 0x0, 0x35ed2b1b, 0xb8b, 0xde28, 0x5, 0xfffffffe, 0x7, 0x6, 0x3, 0x40, 0x3f, 0x0, 0x1, 0x5, 0x2, 0x401, 0x4, 0x1, 0x8, 0x10000, 0x5, 0x16, 0x2, 0x10000, 0x101, 0x80000001, 0x8, 0x5, 0x4, 0x1f, 0x0, 0x1, 0xfffffff8, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x1000, 0x5, 0x1, 0xff, 0x2, 0x7fff, 0x0, 0xc8ae, 0xffffffff, 0x0, 0x876, 0x10000, 0x7, 0x80000001, 0x80, 0x7, 0x1, 0x80, 0x0, 0x3, 0x1, 0x9, 0x9, 0x2, 0x1, 0xfffffffc, 0xfffffff7, 0x8, 0x1, 0x8, 0x8, 0xfffffeff, 0x4, 0xdcb, 0x7, 0x1ff, 0xfc84, 0x6, 0x30, 0x1ff, 0x975, 0x3, 0x0, 0x6, 0x9, 0x7, 0x65c7, 0x0, 0x4, 0x3, 0x4, 0x0, 0x600000, 0x7, 0x8, 0x9, 0x800, 0x7, 0x101, 0x8, 0x8, 0x8, 0x6, 0x4, 0x5, 0x3304, 0x81, 0xffffffca, 0x6, 0x200, 0x1fcda06a, 0x6, 0x1, 0x400, 0x4, 0x1, 0xfffffff7, 0x5, 0x5, 0x0, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x2, 0x9, 0x20, 0x6, 0x1, 0x2, 0x20, 0x7, 0x6, 0x3ff, 0x1, 0x78, 0x61f6da31, 0x9, 0x3800000, 0x558, 0x4, 0x1696, 0x7, 0x9, 0x6, 0xfffffff7, 0x2, 0x6, 0x9, 0x6, 0x80000001, 0x5, 0x6, 0x1, 0xdb, 0x2, 0x3, 0x0, 0x1, 0x4, 0x1ff, 0x1, 0x0, 0x1, 0x7, 0x7, 0x4, 0xffffffff, 0x5, 0x6, 0x6, 0x80, 0x20, 0x2, 0x80, 0x3ff, 0x6, 0x1, 0x8001, 0xfffffff8, 0x300000, 0x4, 0x5, 0x5, 0x973, 0x0, 0x3, 0x6, 0x9, 0x0, 0x5, 0x4000, 0x7, 0xffff, 0x0, 0x5, 0x0, 0x1, 0x7, 0x1, 0x26d4, 0x1, 0x1400, 0x9, 0xf4, 0x9, 0x3f, 0x1, 0x5, 0x0, 0x8001, 0x3, 0x9, 0xffffffff, 0x8, 0x3, 0x9, 0x6, 0x0, 0x6, 0x1, 0xa1, 0x2, 0x7ff, 0xfffffbff, 0xfffffffc, 0x5, 0x58c6933c, 0x80000001, 0x4, 0x1, 0x8, 0xfffffff7, 0x84e, 0x3, 0xffff8000, 0x80000001, 0x6, 0x5, 0x91db, 0x7, 0x8, 0x3, 0x7, 0x6, 0x3f, 0x4, 0x6, 0x101, 0x8f, 0x0, 0x0, 0x0, 0x3ff, 0x9, 0x7, 0x6, 0x4, 0x7, 0x20, 0x1, 0x5, 0x4, 0x10001, 0x3, 0x7, 0x300000, 0x9, 0xffffffff, 0x6, 0x3c, 0x3, 0x8001, 0x4, 0x0, 0xfffffffb, 0x0, 0x7, 0x200, 0x5, 0x7, 0xfffffffc, 0x1000, 0xffffff6b, 0x1f, 0x6, 0xfffffbff, 0x1ff, 0x5, 0x100, 0xff, 0x7, 0x5, 0x80, 0x9, 0x8, 0x3, 0x7fff, 0x1, 0x2, 0xffff, 0x9, 0x6, 0x7ff, 0xffffffff, 0x200, 0xffffffff, 0x7, 0x8, 0xffff, 0x7fff, 0x80000000, 0xd2, 0x4, 0x0, 0x7f, 0x4, 0x5, 0x180, 0x7ff, 0x80000000, 0x4, 0xe2, 0xaf, 0x5, 0x9, 0x5, 0xfd02, 0x3, 0x3, 0xfff, 0x10001, 0x60, 0x8, 0x20, 0x4, 0x80, 0x1, 0x7f, 0x4, 0x7, 0x1, 0x80, 0x9d7, 0x14, 0x8, 0x6391, 0x7fffffff, 0x4, 0x5, 0xb4, 0x10000, 0x7, 0x3, 0xbf3d, 0x42, 0x7, 0x3, 0xfffffff8, 0x50, 0x10001, 0x800, 0x7, 0x1fb0, 0xbb6, 0x9, 0xffffffff, 0x3, 0x6, 0x80000000, 0xe7, 0x84, 0x8001, 0x7, 0xffff0dca, 0x2, 0xe5, 0x0, 0x9, 0x30, 0x6, 0xfffffffc, 0x800, 0x0, 0x80000000, 0x5, 0x8, 0x4, 0x10001, 0x85510000, 0x4, 0x5db00, 0x9, 0x9, 0x0, 0x0, 0x2, 0x1000, 0x356, 0x101, 0x9, 0x1f, 0x5, 0x1f, 0x7, 0xfffffffd, 0x0, 0x0, 0x3, 0x4, 0x2fb0, 0x101, 0x7, 0x16, 0x20, 0x4, 0x0, 0x1, 0x0, 0x9, 0x3, 0x4, 0x6, 0x2, 0x5ca38396, 0x2, 0x3ff, 0x0, 0x800, 0x2, 0x5, 0x0, 0x1ff, 0x10001, 0x7fff, 0xb, 0x1, 0x3, 0x2, 0x1, 0xffffff59, 0xe6f9, 0x800, 0x80, 0x0, 0xff, 0x2, 0x1, 0x9, 0x3, 0xe25, 0x5, 0x7fffffff, 0x6, 0x7, 0x80000001, 0x4, 0x3, 0x39dc, 0x5, 0x9, 0x0, 0x5, 0x80, 0x4, 0xfc, 0xb48, 0x4, 0x8, 0x3, 0x9, 0x9, 0x101, 0x6, 0x1, 0x40000000, 0xf6e, 0x93, 0x9, 0x8001, 0xffffffff, 0x72, 0x6, 0x646, 0x1f, 0xffff, 0x2, 0x3f, 0x7, 0x873, 0xff, 0x0, 0x80000, 0xffffff76, 0xfffffffa, 0x6, 0x83d, 0x3f, 0x8, 0x3, 0x6, 0x80000000, 0x3, 0x12, 0x7ff, 0x8e, 0xaf, 0xffffffff, 0x2, 0x27c7, 0x401, 0x0, 0x1f, 0x8000, 0x40, 0x3f, 0x2, 0x8, 0x6, 0x3, 0x1fffc0, 0x9, 0xfffffffe, 0x6, 0x80, 0x9, 0x4, 0xfff, 0xa16, 0x0, 0x1, 0x400, 0x0, 0x2d5c, 0x7, 0x7, 0x3, 0x6, 0x9, 0x10000, 0xd1d, 0x95, 0xffff, 0x3, 0x0, 0x80000001, 0x20, 0x2, 0x55, 0x6, 0x838, 0x5, 0x20, 0x7e0, 0x6d9, 0x101, 0x3e4, 0x7ff, 0x6, 0x6, 0x4, 0xffffffff, 0xfff, 0x7, 0xd4, 0x100, 0xffffffff, 0x9, 0xfc4d, 0xffff8001, 0x2d8a99a9, 0x3, 0xffffff7f, 0x1, 0x4]})
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000a, 0x10, r1, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_pressure(r0, &(0x7f0000001240)='cpu.pressure\x00', 0x2, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000001280)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x6, 0xfff, {0x0, r4}, 0x4, 0x4, 0x1, {0x0, 0x0, r5}}, 0xc5d)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001340)={'syztnl2\x00', &(0x7f00000012c0)={'syztnl1\x00', <r6=>0x0, 0x29, 0x3, 0x20, 0x80000001, 0x40, @mcast2, @private2, 0x10, 0x40, 0xe9df, 0x7}})
r7 = syz_io_uring_setup(0x6386, &(0x7f0000001380)={0x0, 0x5a7c, 0x20, 0x0, 0x145, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001400), &(0x7f0000001440))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8)
inotify_rm_watch(r0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r9, &(0x7f00000014c0)='memory.pressure\x00', 0x2, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000001580)={'ip6gre0\x00', &(0x7f0000001500)={'ip6gre0\x00', r6, 0x2f, 0xff, 0x40, 0x9, 0x20, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0x0, 0x3}})

08:06:18 executing program 2:
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='FREEZING\x00', 0x9)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x1, 0x1, 0x80})
read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/191, 0xbf)
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000140)={0x2, 0x1, 0x9})
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x9)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000180)={0x2, 0x303, 0x4, 0x9, 0xea, 0x200})
r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffff800, 0x101802)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200), 0x1)
ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x7)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x40, 0x8, 0x8, 0x48, @remote, @mcast2, 0x8000, 0x8, 0xc333, 0x3}})
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000380)={0x1, 0xffffffff, 0x7fffffff})
r3 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x3f, 0x4487c0)
write$eventfd(r3, &(0x7f0000000400)=0x7, 0x8)
write$P9_RLOCK(r3, &(0x7f0000000440)={0x8, 0x35, 0x2, 0x3}, 0x8)
inotify_add_watch(r0, &(0x7f0000000480)='./file0\x00', 0x10000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r4=>r1, 0x2f, 0x64, 0x20, 0x10001, 0x42, @private1, @dev={0xfe, 0x80, '\x00', 0x34}, 0x8, 0x40, 0x6, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6tnl0\x00', r4, 0x29, 0x81, 0x46, 0x0, 0x19, @local, @local, 0x7, 0x40, 0x1, 0x9}})

[  118.662148] audit: type=1400 audit(1745741178.287:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:06:18 executing program 3:
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x80000000, 0x3, 0xfffffffc, 0x5, 0x8})
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x40, 0x4}}, 0x14)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x200, 0x6, 0x2, 0x1, 0x6d})
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x30800)
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000140)={{0x2, 0x3, 0x1000, 0x7fff, 0x8, 0x100}, 0x220, [0x101, 0x7, 0x3f, 0xffffffff, 0x8, 0x4, 0x1dd3, 0xe73f, 0x9fa7, 0x8, 0xff000, 0x1f, 0x2, 0x7, 0x2a0, 0x81, 0x8, 0x800, 0x0, 0xf59, 0x2, 0x6, 0x8, 0x6, 0x40, 0x0, 0x0, 0x2, 0x7f, 0x7f, 0x8, 0x40, 0x3, 0xd4ab, 0xfffffffb, 0x3, 0x628, 0x2, 0x5, 0x5, 0x6, 0xe12, 0x8, 0x6f5, 0xfffffffe, 0x10000, 0x90d, 0x5, 0xf3fc, 0x4, 0x6b0d, 0x1ff, 0x3, 0x0, 0x400, 0x1, 0x20, 0x7ff, 0x40, 0x1, 0x2, 0x5, 0xf7f4, 0x3, 0x7fffffff, 0xa2b7, 0x8001, 0x5, 0xc30, 0x4, 0x4, 0x3, 0x3, 0x5, 0x2, 0xa9, 0x14c, 0x7ff, 0x3, 0x6f48, 0x3ff, 0x7a, 0x8, 0x6, 0x0, 0xff, 0x8000, 0x437d, 0x2edd4fd4, 0x8, 0x5, 0x8001, 0x40, 0xaf, 0x200, 0x566cbf0, 0x0, 0x7f, 0x8001, 0x4, 0x4, 0x0, 0x10000, 0x9, 0x5, 0xe1f0, 0x7fff, 0xf85, 0x2, 0x1, 0x4, 0x7, 0x334c, 0x9, 0xffffffff, 0xbf, 0x3, 0x1000, 0x3, 0x5, 0xb3dffa2, 0x1, 0x400, 0x2ab, 0x4, 0xd4e, 0x2, 0x3, 0x2, 0x7fffffff, 0x4daf, 0x2, 0x8, 0x2, 0x38, 0x13b, 0xffffffff, 0x0, 0x4, 0x0, 0x2, 0x200, 0x1, 0x1, 0x3, 0x9, 0xff, 0x4, 0xff, 0xfffffff7, 0x3ff, 0x3f, 0x3ff, 0x5, 0x2ed7f639, 0x1ff, 0x7, 0x6751, 0x995, 0x810, 0x7f, 0x400, 0x9, 0x7, 0xfffff000, 0x400, 0xffffff81, 0x8, 0xbd9, 0x7, 0x5, 0x1, 0xb1e, 0x31a9, 0x8001, 0x0, 0x400, 0x598699c0, 0x6, 0x6, 0xd97, 0x7, 0x2, 0x7f, 0x80000, 0x0, 0x0, 0x6, 0x400, 0x3ff, 0x1f, 0x2, 0x6555e54, 0x10001, 0xf319, 0x6, 0xfffff001, 0x4, 0xce77, 0xff, 0x7, 0x101, 0x8000, 0x0, 0x4, 0xffffff0d, 0x6, 0x7, 0x8, 0x81, 0x4, 0x41d, 0x1, 0x9, 0xfffff801, 0x1, 0x2, 0x200, 0x80000001, 0x101, 0x40, 0x4b080, 0x101, 0x9372, 0x3, 0x7, 0x4, 0x7f, 0xfffffff8, 0x1, 0x4, 0x2, 0x2, 0xfffffffd, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x2f, 0x8, 0x8, 0x80, 0x9, 0x6, 0x1, 0x100, 0x1, 0x5, 0x7fff, 0x3fc00, 0x9, 0xfffffffa, 0x8, 0xffffffff, 0x1, 0x788, 0x6, 0x4, 0x7, 0x0, 0x4, 0x7ff, 0x2, 0xfffffffc, 0x9, 0x831, 0xffffffff, 0x4, 0x4, 0xffffffff, 0x81, 0x8000, 0x576fd6dc, 0x0, 0xa2e, 0x6, 0x5, 0x1, 0x4, 0x9, 0x6, 0x7, 0x6279, 0x7, 0x1000, 0x1f, 0xfff, 0x1, 0x7, 0x9, 0x5, 0x4, 0x71c, 0x9, 0x401, 0x80000001, 0x0, 0x8, 0x9, 0x423, 0x101, 0x101, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x426, 0xbd43, 0x0, 0x6, 0x7f, 0x7b3, 0x3ff, 0xfffff800, 0x7, 0x1, 0x7, 0x1, 0x5, 0xd7, 0x5, 0x81, 0x7e6e6e39, 0xedf, 0x100, 0xed, 0x9, 0x101, 0x9d, 0x8af9a94, 0x8aab, 0x80, 0x100, 0xc000000, 0x5, 0x7fffffff, 0x5, 0x401, 0x4, 0x4, 0x2, 0x4, 0x4, 0x8, 0xf0d, 0x1, 0x7, 0xda1, 0x2c31, 0x40, 0xffff, 0x43c, 0x960, 0x10001, 0x4, 0x4, 0xadbc0, 0x2, 0x48cb, 0x7, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x39, 0x6, 0x0, 0xfffffff7, 0xffffffff, 0x7ff, 0x0, 0xfffffff8, 0x0, 0xffffffb5, 0xf89d, 0x40, 0x9, 0x0, 0x3ff, 0x2, 0x800, 0x10000, 0xffffff7f, 0x8, 0x8, 0x0, 0x7, 0x7, 0x2, 0x400, 0x8, 0xf75, 0x2, 0x800, 0xf8, 0x8, 0x3, 0x4, 0x6, 0x9, 0x2, 0x1, 0x0, 0x100, 0x6, 0x80, 0x9, 0x3, 0x101, 0x5, 0x4, 0x5, 0x100, 0x1, 0x9da9, 0x0, 0x2d1, 0x3f, 0x8, 0x7ff, 0x3, 0x0, 0xe228, 0x2, 0x80000001, 0x2, 0xd58, 0x2, 0x81, 0x9, 0x9, 0x1, 0x7, 0xa62, 0x400, 0xe31, 0x2, 0x7ff, 0x1, 0x62e, 0x400, 0x1, 0x7, 0x9, 0xffffffff, 0x3, 0x2, 0x80000001, 0x61, 0x81, 0x1, 0x2, 0x6, 0x9c, 0x80000000, 0x1, 0xa4, 0x10001, 0x3, 0x0, 0x656, 0x7d4ef774, 0x2, 0x4, 0x81, 0x4, 0x9, 0xaadd, 0xfffffffc, 0x3, 0xfffffffa, 0x80, 0x100, 0x3, 0x8d6, 0x7fff, 0x7, 0x1b4, 0x8, 0x7, 0x602e99f7, 0x0, 0x1, 0x6, 0x9, 0x9701, 0xfffffffa, 0x40, 0x401, 0x0, 0x401, 0x7fff, 0x81, 0x3, 0x80000001, 0x7, 0x5, 0xa613041, 0x40, 0x101, 0x2977, 0x580c94af, 0x8, 0x8, 0x8, 0xbb, 0x64, 0x4, 0x8, 0x91, 0x1, 0x5760, 0x9, 0x3f, 0x1e2, 0x10000, 0x9, 0x0, 0x400, 0xb47, 0x7, 0x8001, 0xffff0001, 0x9, 0x6, 0x5e9, 0xcbe7, 0x5, 0xe7, 0x6, 0x2, 0x0, 0xffffffff, 0x1, 0x51e, 0x4, 0x6, 0x5, 0x80000000, 0x80, 0x6, 0x60, 0x7, 0x3f, 0x7, 0x6, 0xffffffff, 0xffffffe6, 0x2, 0x8, 0x1757, 0x7, 0x1, 0x10dc, 0x5, 0x164b77a7, 0xffff, 0x5, 0x0, 0xdfc, 0x20, 0x8, 0xf3, 0xdb, 0xfff, 0x4, 0x8000, 0x0, 0x5, 0xfffff001, 0x9, 0x1f, 0x7edb, 0xb5, 0x9, 0x0, 0x1f, 0x2f, 0x80000000, 0x9, 0x2, 0x14b9, 0x3, 0xffff, 0x2, 0x20, 0x2, 0x0, 0x0, 0x7fffffff, 0x3, 0x3ff, 0x81, 0x10001, 0x80, 0x5, 0xf43, 0xdb6, 0x2, 0x401, 0x8, 0x800, 0x8, 0x0, 0x7f, 0xd, 0xffff0000, 0x9, 0xfffff000, 0x1000, 0x1280, 0x8000, 0x2, 0x7f, 0x1, 0x4, 0x100, 0x5, 0x3, 0x0, 0x3, 0x3, 0x9, 0x6, 0xffffffff, 0x8, 0x100, 0x80000001, 0x4, 0x80000000, 0x5, 0x8, 0x2, 0x4000000, 0x2, 0x2, 0x7ff, 0x1, 0x0, 0x8001, 0x6, 0x400, 0x0, 0x5c, 0x0, 0x6, 0xca5, 0x10001, 0x1000100, 0x1, 0x7, 0x8, 0x4, 0xff, 0x31b88644, 0x9b, 0x0, 0x3e77, 0xf63, 0xfffffff7, 0x8, 0x6, 0x100, 0x127, 0xe9dd, 0x101, 0x9, 0x8, 0x4, 0xd3, 0x9, 0x2, 0x7fffffff, 0x81, 0x3, 0x6, 0xfffffffa, 0x39dd6656, 0x3, 0x3, 0x4, 0x6, 0x8, 0x0, 0x0, 0xebc, 0x7f, 0x9, 0x3f, 0x7, 0x40, 0x2d, 0x8, 0xff, 0xffffffff, 0x0, 0x800, 0x6, 0x7, 0x28000, 0x7ff, 0x6, 0x6, 0x4, 0x0, 0x80000001, 0x7, 0x3d, 0x1, 0x5, 0x6, 0x7fffffff, 0x800, 0xa4, 0x0, 0xea, 0x8, 0x800, 0x80000000, 0x4, 0x2ac, 0x9, 0x8001, 0x3f, 0x0, 0xfff, 0xfffffffd, 0x400, 0x2, 0x49, 0x59, 0x1000, 0x5, 0xfc000000, 0x7, 0x7, 0x2, 0x9, 0xa82, 0x3, 0x3, 0xf0, 0x10001, 0x80000001, 0x7fffffff, 0x8, 0x80000001, 0x9c, 0x4, 0x7, 0x400, 0x2, 0x0, 0x9, 0xfffffe01, 0xff, 0x1, 0xfffff924, 0x9, 0x7, 0x0, 0x7, 0x2, 0xfffffff8, 0xfffffff8, 0x0, 0x7fff, 0x8, 0x800, 0x40, 0x0, 0x1, 0x0, 0x3, 0x4, 0x1, 0xb5, 0x7cdb, 0x0, 0x80, 0x2, 0x1f, 0x49be, 0x9, 0x8, 0x8, 0x3cab, 0x6, 0x4, 0x800, 0x3f, 0x400, 0x6, 0x3, 0x80000001, 0x3, 0x9, 0xfffffff7, 0x3, 0x401, 0x400, 0x8, 0x3, 0x6, 0x1, 0x101, 0x3, 0x7ff, 0x2, 0xffff0001, 0x1f, 0x3ff, 0x840d, 0x200, 0x2, 0xee8, 0x0, 0x80000001, 0xdbf, 0x9, 0x2, 0x3, 0x1, 0xfff, 0x5bd, 0x1000, 0x7fffffff, 0x5, 0x18, 0x400, 0xfffffffe, 0x6, 0x5, 0x4, 0x6, 0x3, 0x50, 0x1ff, 0xf88f, 0x7, 0x101, 0x6, 0x0, 0x81, 0x6, 0x3, 0x5, 0x3f, 0x4, 0x9, 0x8, 0xa2, 0x1, 0x0, 0x6, 0x2, 0x8000, 0xffffffff, 0x7, 0x40, 0x0, 0x10001, 0xf132, 0x8, 0x7, 0x2, 0x1ff, 0x5, 0x3, 0x78d, 0x7, 0x2, 0x4, 0x31d9, 0x80000001, 0xfffffffc, 0x100, 0x7, 0x3ff, 0x9, 0x0, 0xa2de, 0x8001, 0x8, 0x6, 0x3, 0x6, 0x4, 0x8b, 0x10000, 0x5, 0x1, 0x6, 0x6, 0x8, 0x7fff, 0x800, 0xffffff75, 0x7, 0x7fff, 0x9, 0x5, 0x8000, 0x6, 0x1, 0x2, 0x0, 0x0, 0x99, 0x81, 0x80, 0x6179, 0x8, 0x8, 0x10b76adb, 0x10000, 0x73b2, 0x9, 0x4, 0x0, 0x0, 0xffff, 0x9, 0x8, 0x7ff, 0x8, 0x3fb8, 0x2, 0x7ff, 0x400, 0x9fd, 0x3ff, 0x7, 0x0, 0xf9a6, 0x100, 0x3f85, 0xfffffffb, 0x2, 0x9, 0xffff7fff, 0x4, 0x1, 0x6, 0x6, 0x1f, 0xfffffffb, 0xffff8000, 0x7, 0x8000, 0x5, 0x5, 0x401, 0x401, 0x9, 0x1f, 0x9, 0x8, 0x7, 0x400, 0x3, 0x1ff, 0x200, 0x5a, 0x0, 0x5, 0x1000, 0x1000, 0x1, 0x4, 0xb76c, 0xffffff00, 0xccd, 0x2, 0xffffffff, 0x6, 0x5, 0x7fff, 0x6, 0x2, 0x7, 0x60b, 0x8, 0x6, 0x4, 0x8001, 0x2, 0x1, 0x1ff, 0x6, 0xa2, 0x80, 0x1ff, 0x1, 0x76c, 0x4, 0x0, 0x7, 0x173, 0x7fff, 0xfffffff9, 0x9, 0x3, 0x2, 0x1000, 0x8, 0x6, 0xffffffff, 0x7, 0x4, 0x0, 0x4, 0x5, 0x7, 0x0, 0x20, 0xa2c, 0x0, 0x1, 0x7ff, 0x5, 0x5bd]})
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000001180)={0x2, 0x3, 0x3, 0xc08, 0xff, 0x3})
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000011c0)=""/186)
r3 = syz_open_dev$vcsn(&(0x7f0000001280), 0x3f, 0x80)
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000012c0)={0x3, 0x201, 0x9, 0x1, 0xfff, 0xffff})
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000001300)={{0x1, 0x200, 0x2, 0x5, 0x7, 0xffff}, 0x1c, [0x3, 0x4, 0x5, 0x9aef, 0xf86, 0x6309, 0x3, 0x10001, 0xa6, 0xffff8000, 0x2, 0x18a6, 0x8, 0x8, 0x19, 0xddc, 0x691, 0x7, 0x1, 0xffffffff, 0x2, 0x200, 0x3f, 0x9, 0xe9f, 0x0, 0x2, 0x0, 0x1, 0xfff, 0x6, 0x8, 0xffffffff, 0x0, 0x20, 0xb87, 0x3f, 0x2, 0x2, 0x24, 0x0, 0x8, 0x8, 0x9, 0x9b0, 0x101, 0x1, 0xa16, 0x5, 0x20, 0x400, 0x2, 0x5, 0x5, 0x10000, 0x9, 0xffffff00, 0x10000, 0x3, 0x1, 0xff, 0x2, 0x226, 0x1, 0x7, 0xfffffffd, 0x6a, 0x10000000, 0x8, 0x10000, 0x1000, 0x3a9, 0x6, 0x401, 0x5, 0x101, 0x4, 0x1f, 0x7fffffff, 0x5bf, 0x2, 0x10000, 0x0, 0x7ff, 0x3, 0xc22, 0x8, 0xffffffff, 0x3, 0x0, 0x5eb00000, 0x7ff, 0x9, 0x100, 0xffff7b40, 0x0, 0x8000, 0x7, 0x3, 0xfffffffe, 0x80000000, 0x6, 0x400, 0x6, 0x3, 0x800, 0x7, 0x1000000, 0x9, 0x1400, 0x9, 0x20, 0x0, 0x7, 0x0, 0x3f, 0x702, 0xffffa7b0, 0x0, 0x1, 0x1aa, 0x400, 0x7, 0x9, 0x8, 0x10000, 0x7fffffff, 0x6, 0xffffffc1, 0x10001, 0x1ff, 0x6, 0x7fff, 0x7ff, 0x8, 0x3, 0x100, 0x6a, 0x3, 0x1, 0x8001, 0x2, 0x8, 0x9, 0x8, 0x6, 0x1, 0x2, 0xfffffffc, 0x4a, 0x1, 0x81, 0x7, 0x0, 0x7, 0x6, 0xffff, 0x8000, 0x1000, 0x81, 0x7f800000, 0x9, 0x8001, 0x6, 0x3, 0x7, 0x7ff, 0x80000001, 0xfffffffa, 0x46, 0x3ff, 0x99d, 0x0, 0x101, 0x1ff, 0x0, 0x4, 0x80000001, 0x1, 0x7ff, 0x0, 0x3f, 0x5, 0x8, 0x9, 0x6, 0x140, 0x5, 0xffffffff, 0x0, 0x5, 0x4, 0x6, 0x0, 0x3f, 0x7fff, 0x80000001, 0x2, 0x3f, 0x0, 0x40, 0x8, 0x5, 0x6c, 0x8, 0x0, 0x8, 0x4, 0x8, 0x401, 0x880, 0x7, 0x6, 0x800, 0xda6, 0x101, 0x1, 0x3, 0x1, 0x10, 0x7, 0x8, 0x6, 0x10001, 0x4d, 0x10000, 0x7, 0x6, 0xffffffff, 0x9, 0x1, 0x6, 0x7, 0x71e, 0x80000001, 0x4475, 0x0, 0x80000001, 0x3, 0x9, 0x3f, 0x4, 0x8, 0x2, 0x3ff, 0x447bfbb6, 0x7f, 0x6, 0x3, 0x3, 0x1, 0x1000, 0x6af3, 0xfff, 0x80000001, 0x6, 0xfffffffa, 0x82, 0x1, 0x1, 0x100, 0x6, 0x6, 0xffff, 0x9, 0x20, 0xe8ae, 0x30000000, 0x1, 0xae, 0x4, 0x0, 0x2ce, 0x10000, 0x2, 0x6, 0x5c4, 0x3, 0x6, 0x9, 0x6, 0x8, 0x1, 0x380, 0x800, 0x4, 0x6, 0x100, 0x1, 0x7fffffff, 0xffff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x8, 0x5, 0x260c, 0x3, 0x1ba, 0x1, 0x4, 0x2, 0x1, 0x100, 0xffff, 0xfffffe00, 0x7, 0x6, 0x0, 0x3, 0xb2c3152b, 0x5, 0x2d1, 0x6, 0xfffff800, 0x563b, 0x8001, 0x4, 0x6, 0x9, 0x1c6c, 0x7, 0x1f, 0x10000, 0x400, 0x1, 0x9, 0x5, 0x1f, 0x91, 0x1, 0xfffffffa, 0x8, 0x5, 0x47b, 0x7, 0x79719e7a, 0x94a, 0x6, 0x7, 0x8001, 0x200, 0x1000, 0x400, 0xa04b, 0x5, 0xe08, 0x7ff, 0x8, 0x7, 0x3, 0x4, 0x6, 0x1, 0x3, 0x3, 0x7, 0x6, 0x14, 0x0, 0x8001, 0x81, 0x6, 0x5, 0x6, 0x1, 0x1, 0x8, 0x6, 0x10000, 0x6, 0x3, 0x20, 0x1400, 0x1, 0xfff, 0x2, 0x4, 0x7f, 0x4, 0x6, 0x3, 0x0, 0xffff119a, 0x3, 0x200, 0x7, 0x6, 0x8, 0x59bf6f5f, 0x1, 0xd9, 0x7, 0x3, 0x1ff, 0x800, 0x1000, 0x5, 0x7, 0x0, 0x34d, 0x79a6, 0x81, 0x9, 0x3, 0x28, 0x8, 0x1, 0x400, 0xff, 0x100, 0x8000, 0xff, 0x1, 0x1, 0x3, 0x7f, 0xa26, 0x400, 0x8, 0x10001, 0xfffffffc, 0x47f9972a, 0x0, 0x400, 0x8, 0x6, 0x12c5, 0x4b2dd7a4, 0x4, 0x8001, 0x1, 0x7ff, 0x4, 0x7, 0x4c2c, 0x2, 0x0, 0x7, 0x9, 0x1ff, 0x6, 0x8, 0x7f, 0x20, 0x20, 0x2, 0x2, 0x5, 0x2, 0x2, 0x6, 0x8001, 0x1, 0x0, 0x8, 0x3, 0xbb, 0x7ff, 0x8, 0x1, 0xa4, 0x6, 0x1000, 0xc55, 0x0, 0x7, 0xe93, 0x4, 0x0, 0x7, 0x0, 0x6, 0x5, 0x8, 0xe32e, 0x5, 0x800, 0x3, 0x200, 0x3, 0xfffffff9, 0x20, 0x4, 0xffffffff, 0x7, 0x6, 0x1ff, 0x100, 0xfffffffe, 0x1000, 0x0, 0x1a0d9e35, 0x7, 0x6, 0xe9, 0x20, 0x9, 0x7, 0x20, 0x0, 0x9, 0x2, 0x2, 0x101, 0x9, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6, 0x100, 0x7, 0xff, 0x5, 0x9, 0x721, 0xfffffff9, 0x3, 0xa0000000, 0x2, 0x81, 0x6, 0x9, 0x90000000, 0x7fff, 0x6, 0x400, 0x5, 0x6, 0x9, 0xff, 0xe7, 0xe0000000, 0x80, 0x7ff, 0x4, 0x400, 0xffffffff, 0xffff8000, 0x0, 0x9, 0xfff, 0x81, 0x6, 0x1ff, 0x3c7, 0x80000001, 0x40, 0x2, 0x1, 0x7f, 0x7ff, 0x4, 0x1, 0x3, 0x0, 0x5, 0x2, 0x8, 0x7, 0x5, 0x4, 0x9, 0x30000, 0x401, 0x2, 0x7fffffff, 0x1, 0x6, 0x6, 0x9, 0x1, 0x4, 0x0, 0x0, 0x85, 0x9, 0x8, 0x7ff, 0xfffffe00, 0x0, 0x80000001, 0xff, 0x3, 0x10000, 0xffffffff, 0x0, 0x180, 0xa64, 0x8, 0x6, 0x401, 0xffff0001, 0x1, 0x5, 0x5, 0x80000000, 0x2, 0x400, 0x421, 0x5, 0x0, 0x992, 0x4, 0xffffffff, 0xb8, 0x5, 0x7, 0x4, 0x1, 0x9, 0x4, 0xab, 0xfb, 0xede, 0x5, 0x2, 0x9767a71, 0xfffffffd, 0x400, 0x1, 0x20, 0x1000, 0x101, 0x2, 0x40, 0x80000001, 0x4, 0x0, 0x3, 0x200, 0x9, 0x4, 0x7, 0x5, 0x63, 0x36e, 0x4, 0x7f, 0x5, 0x7fffffff, 0x4, 0x7, 0x7f, 0x1, 0x40, 0xffffcbdf, 0x0, 0xc000, 0x78, 0x6, 0x1, 0x0, 0x6, 0x0, 0x0, 0x83, 0x4, 0x86e, 0x9, 0x8, 0x6, 0xffff8000, 0x2, 0x2, 0x6, 0x9, 0xd6, 0x800, 0x3, 0x3f, 0x10000, 0x8, 0xffffffff, 0x5, 0x8, 0xff3f, 0xfffffffa, 0x80000000, 0x1000, 0x200, 0x6d, 0xe9a, 0x8000, 0x2f5d555, 0x0, 0xccc, 0x5, 0x0, 0x2, 0x6, 0x8, 0x2, 0x3, 0x7fffffff, 0x1, 0x9, 0x1, 0x7, 0x101, 0x3, 0x80000001, 0x8a5, 0x5, 0x2d, 0x78, 0x3368, 0x7ff, 0x0, 0x7, 0x6, 0x9, 0xbf, 0x1ff, 0xfffffff8, 0x5, 0x1, 0x40, 0xf3, 0xd21, 0x5, 0x19d4a81c, 0x80000001, 0x2c27def8, 0x1270, 0x200, 0x5, 0x7, 0x2, 0x3, 0x81, 0x0, 0x1, 0x0, 0x2, 0x1f, 0x7, 0x3, 0x0, 0x9120, 0x9ac, 0x5, 0x6, 0x8001, 0x7fffffff, 0x0, 0x5, 0x1, 0x2, 0x9, 0x3, 0x6, 0x7, 0x1000, 0x40, 0x9, 0x48, 0x7f, 0x7, 0x8, 0x9, 0x1, 0x3, 0x2, 0xfffffff9, 0x5, 0xfffff800, 0x0, 0xa9, 0x3c, 0x8, 0xffffffe1, 0x9625, 0x7, 0x86, 0x3, 0x8, 0x9e, 0xac7, 0x340, 0xfffffff7, 0xc, 0x8, 0x0, 0x3, 0xffffffff, 0x4, 0xfff, 0x2, 0x3, 0x5, 0x8000, 0xfff, 0x80000001, 0x20, 0x9, 0x5, 0x5f00, 0x1f, 0x9, 0xbf, 0x10000, 0x1b8, 0x80000001, 0x10000, 0x9, 0x7, 0xcd6, 0x7, 0x1, 0x7ff, 0x2, 0x0, 0x8, 0x4, 0xa8f6, 0xfff, 0x0, 0xf089, 0x5, 0x5, 0x1, 0x4, 0x8001, 0x7, 0x7, 0x7fff, 0x1, 0x97, 0xfa3c, 0x5, 0x7, 0x4, 0x80000000, 0x0, 0x8, 0x1, 0x1, 0xd1e, 0x7d, 0xfffffc00, 0x0, 0x7, 0x48e, 0xffffff7e, 0x9, 0x8, 0x1, 0x6, 0x8001, 0x8, 0x4, 0x0, 0x4, 0xbf1, 0x8, 0xfff, 0x8, 0x0, 0x9, 0xca26, 0xffffffff, 0x7ff, 0x5, 0x7, 0x2, 0x8, 0xdfff, 0x4, 0x2, 0x8001, 0x7fffffff, 0xc1, 0x4, 0x40, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x3, 0x2, 0xfffffffa, 0xfff, 0x1, 0x2, 0x2, 0x777, 0x4, 0x40, 0xffff, 0xa3, 0x0, 0xfffffeff, 0x401, 0x200000, 0xffff, 0x2, 0xfffffff9, 0x80000001, 0xffff, 0x7f, 0xfffffe01, 0x4, 0x40, 0x2e3, 0x8001, 0x7, 0x2, 0x800, 0x2, 0x2, 0x20, 0xfffffbe1, 0xff, 0x7, 0x100, 0x8, 0x53e0, 0xffffffff, 0x8, 0x5, 0xc2, 0xfffffffa, 0x1, 0x401, 0x0, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff7, 0x92d, 0x81, 0xffffffff, 0x9, 0xff, 0x8, 0xf79, 0x13, 0x6a23, 0xfffffffb, 0xb3e, 0x3, 0xc6, 0x2, 0x4, 0x14000, 0x3f, 0x2253, 0x6, 0x6, 0x2, 0xfffffff9, 0x567, 0x6, 0x3, 0x0, 0xffffffff, 0xe2, 0xc107, 0x4, 0x2, 0x3ff, 0x4, 0x6, 0x0, 0xefc, 0x1f, 0xb5, 0x4, 0x1ff, 0xfffffff8, 0x38, 0x7, 0x0, 0x5, 0x8001, 0x1ff, 0x400, 0x7fffffff, 0x1, 0xd81, 0x48, 0x919, 0x6, 0xf996, 0x100, 0x4, 0x3, 0x3, 0x7, 0x7, 0x200, 0x100, 0x10000, 0x41bc4ba6, 0x8b, 0x3, 0x8, 0x0, 0x6, 0x80, 0xc412, 0x400, 0x70b, 0x38, 0x6e90bcb3, 0x1ff, 0x198d, 0x3, 0x0, 0x1f, 0x8, 0x24b, 0xfffffff8, 0x9, 0x800, 0x7, 0x5a07]})
write$P9_RLOPEN(r3, &(0x7f0000002340)={0x18, 0xd, 0x1, {{0x4, 0x2, 0x8}, 0x2}}, 0x18)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002380), 0x111482, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000023c0)={0x3f6, 0x6, 0x3, 0x3})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000024c0)={'ip6gre0\x00', &(0x7f0000002440)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x3f, 0x3, 0x6, 0x40, @mcast1, @local, 0x80, 0x7, 0xff, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x7)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
pipe2$9p(&(0x7f00000025c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$P9_RGETATTR(r6, &(0x7f0000002600)={0xa0, 0x19, 0x1, {0x80, {0x4, 0x1, 0x7}, 0x60, 0x0, 0x0, 0x1, 0xfffffffffffffff8, 0x4, 0x2bf6, 0x6, 0x0, 0x1, 0x8, 0x7, 0x3, 0x1, 0xffffffffffff1929, 0xc9, 0x2, 0x20000000}}, 0xa0)

08:06:18 executing program 4:
write$9p(0xffffffffffffffff, &(0x7f0000000000)="590c687aca47575082eb7a64693c61d4c98664d1f67a6705d51294e2d2428d68f110bafaf494916a7076a100f03486635a7c9dfae33b79c1906a6398647ea8985e6b372d3cb63447a8aaebfb105abef9dcbdb2703dca5ed27b83290f4bd5b28cb024b3b4f5b050d22eedf76fd99380f7ffca0958c51855c67ca94994d28fc2a2a78912a4d34dee34b92b6492f32d142a86809eb261acbe71a06fcea70aedf2b31a7db541700e7b59daca", 0xaa)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffffffff7fffffff, 0x400000)
write$9p(r0, &(0x7f0000000180)="1f86ce9a358e0c0897ec9c5b2d4c6a975b6294906728d4dd9c68e96591165ea90732e1df65092e7e5dc36b3407adf806d68a0ed6507e9f005b2e7296c1a2c89cdc906b2d3576e9f868ecbbbc7fa3f4d88a13616e2c7a3ae12eb65e3018a2100d652585ad2deb32ddb70c8bf7a822f243a532283a04b165a745e92809cdba1b4a655ad779a237e8f8b82f51b5b922e685c82256cd8b5a4dd5fb5c70aff289b4ab0348dfbae5f959a979339279", 0xac)
write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x1, {0x2, 0x3, 0x6}}, 0x14)
mq_open(&(0x7f0000000280)='/dev/vcs#\x00', 0x80, 0x0, &(0x7f00000002c0)={0x800, 0xbe, 0x29, 0x4})
r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x81, 0x400000)
write$P9_ROPEN(r1, &(0x7f0000000340)={0x18, 0x71, 0x2, {{0x4, 0x2, 0x6}, 0x80000001}}, 0x18)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0)
mq_getsetattr(r2, &(0x7f00000003c0)={0x7f, 0x0, 0x3, 0x987d}, &(0x7f0000000400))
write$eventfd(r2, &(0x7f0000000440)=0x1f, 0x8)
write$P9_RLOCK(r0, &(0x7f0000000480)={0x8, 0x35, 0x1, 0x2}, 0x8)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0)
write$P9_RXATTRCREATE(r3, &(0x7f0000000500)={0x7, 0x21, 0x2}, 0x7)
write$eventfd(r1, &(0x7f0000000540)=0x7f, 0x8)
r4 = syz_open_dev$vcsn(&(0x7f0000000580), 0x3, 0x100)
write$P9_RLERROR(r4, &(0x7f00000005c0)={0x13, 0x7, 0x2, {0xa, '/dev/vcs#\x00'}}, 0x13)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000640)={0x17, 0x7, 0x2, {{0xa, '/dev/vcs#\x00'}, 0x3}}, 0x17)

08:06:18 executing program 5:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x2004100)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x24040011)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x80040, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', <r2=>0x0, 0x29, 0x67, 0x1f, 0xfffffff7, 0x0, @empty, @mcast2, 0x20, 0x8, 0xffff, 0x80000001}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x20, 0x1, 0x4, 0x8, @local, @rand_addr=' \x01\x00', 0x0, 0x8, 0x7fffffff, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'sit0\x00', <r4=>0x0, 0x2f, 0x9, 0x1, 0xffffffff, 0x34, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x7800, 0x4, 0x37}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', <r5=>0x0, 0x77, 0x2, 0x7, 0x800, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x62b, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6gre0\x00', <r6=>0x0, 0x4, 0x7f, 0x3b, 0x522e, 0x4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x8, 0x5df4df84}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'ip6tnl0\x00', <r7=>0x0, 0x29, 0x8, 0x6, 0x6, 0x21, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x5, 0xd2c}})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000e80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000980)={0x494, 0x0, 0x10, 0x70bd28, 0xffff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0xff, 0x8, 0x1f}]}}}]}}, {{0x8, 0x1, r3}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x7f, 0x6, 0x100}, {0xfdec, 0x2, 0x7, 0xfffc0000}, {0x4, 0x7c, 0x5, 0xfca0}, {0xfff, 0x0, 0x0, 0x9}, {0x0, 0x5, 0x62, 0x40}, {0x100, 0x5, 0x5, 0xfffffc38}, {0x8, 0x40, 0x20, 0x5}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc43}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x10}, 0xc004845)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'ip6gre0\x00', r2, 0x4, 0x0, 0xab, 0x8, 0x14, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x8000, 0x80, 0x7fff}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', r3, 0x2f, 0x81, 0xff, 0xf2, 0x4, @mcast2, @loopback, 0x700, 0x40, 0x3, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6tnl0\x00', r5, 0x4, 0x6, 0xfb, 0x401, 0x46, @private2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x700, 0x8000, 0x0, 0xad25}})
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001100))
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '+[})\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44811}, 0x4000)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)

08:06:18 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x2f, 0x7f, 0x7, 0x8, 0x68, @empty, @mcast1, 0x20, 0x8000, 0x1, 0xfffff001}})
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @vsock={0x28, 0x0, 0x2711}, @hci={0x1f, 0x0, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x400, &(0x7f00000000c0)='team0\x00', 0x0, 0x1496, 0x81})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>r0, 0x4, 0xe1, 0x7f, 0x7, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x700, 0x7, 0x1, 0x81}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', <r4=>r0, 0x2f, 0x8, 0x81, 0x9c, 0x1a, @private1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x1, 0x6, 0xfffffff9}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'sit0\x00', <r5=>r0, 0x2f, 0x7, 0x5, 0x0, 0x3, @private1, @empty, 0x10, 0x40, 0x9, 0xc000}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r6=>r0, 0x29, 0x0, 0x1f, 0x2, 0x90, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x40000000, 0xf7e}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r7=>r0, 0x29, 0x6, 0x0, 0x7, 0x20, @private2, @loopback, 0x8000, 0x1, 0xc6, 0x67}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', <r8=>r0, 0x2f, 0x81, 0x5, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x1, 0x5da}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', <r9=>r0, 0x2f, 0x0, 0x4, 0x3ff, 0x0, @mcast1, @empty, 0x700, 0x700, 0x8000, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl0\x00', <r10=>r0, 0x29, 0x9, 0x7f, 0x6, 0x3a, @mcast1, @rand_addr=' \x01\x00', 0x80, 0x40, 0x0, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r11=>r0, 0x2f, 0x8, 0x8, 0x1, 0x18, @local, @loopback, 0x20, 0x10, 0x1}})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000ac0)={0xc08, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r0}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6db}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x3, 0x2, 0x401}, {0x85ab, 0x4, 0x7, 0xc4bb}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf79}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8ce9, 0x2, 0x0, 0x10001}, {0xa48, 0x63, 0x7, 0x29}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r7}, {0x1d0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x46}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x8, 0x4, 0x9}, {0x7ff, 0x7, 0x8, 0x1}, {0x5, 0x1f, 0x5f, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7a28}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r0}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001800)={'ip6gre0\x00', &(0x7f0000001780)={'ip6gre0\x00', r3, 0x4, 0x3f, 0x7, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, 0x8000, 0x80, 0xffffffff, 0x4}})
r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000001840), 0x121880, 0x0)
ioctl$HIDIOCGRAWPHYS(r12, 0x80404805, &(0x7f0000001880))
syz_open_dev$vcsn(&(0x7f00000018c0), 0x40, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001940)={0x0, @vsock={0x28, 0x0, 0xffffffff, @local}, @l2={0x1f, 0x8001, @any, 0x24f5}, @phonet={0x23, 0x31, 0x1, 0x80}, 0x20, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001900)='bond_slave_1\x00', 0x20, 0x8, 0x7})

08:06:18 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x20, 0x81, 0x6, 0x12, @mcast2, @mcast2, 0x7800, 0x8000, 0x7fff, 0x8}})
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x7, 0x1, {{0x9, 'ip6_vti0\x00'}, 0xa7}}, 0x16)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x70, 0x1256, 0x10, @remote, @empty, 0x7800, 0x1, 0x8, 0xff}})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'ip6_vti0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x20008000)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000020)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', <r3=>0x0, 0x0, 0x6, 0x5, 0x3, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x700, 0x7800, 0x80000001, 0x448}})
shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
r4 = semget(0x0, 0x2, 0x35)
semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000400)=""/74)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000480)={0x3, 0x3, 0x2000000, 0x1, 0x9})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', <r6=>r1, 0x4, 0x3f, 0x1, 0x80000001, 0x20, @local, @mcast1, 0x20, 0x8000, 0x0, 0xffffffff}})
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, @isdn={0x22, 0x0, 0x3, 0x8, 0x1}, @can={0x1d, r6}, @qipcrtr={0x2a, 0x3, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)='veth1_to_bond\x00', 0x5, 0x100, 0x40})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', <r7=>r1, 0x2f, 0x1f, 0xff, 0x4, 0x1c, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, 0x7800, 0xe26f6b4619f4567b, 0x5, 0x1000}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r7, 0x4, 0x10, 0x4, 0x4, 0xec, @empty, @remote, 0x7, 0x8000, 0x4, 0xccb}})
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'sit0\x00', r3, 0x2f, 0x7, 0x0, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x700, 0x40, 0x4, 0x800}})

[  120.123036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.129054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.131939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.143091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.152356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.196416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.202049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.204443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.212576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.224874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.277521] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.292712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.301021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.303885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.306477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.309020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.320502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.330789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.335571] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.340123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.343422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.351931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.355471] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.356345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.360797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.362993] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.365096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.377844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.379944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.387751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.390683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.392960] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.408205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.421508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.426388] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.433884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.434097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.464593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.502748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.533800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  122.200438] Bluetooth: hci0: command tx timeout
[  122.262515] Bluetooth: hci1: command tx timeout
[  122.455357] Bluetooth: hci2: command tx timeout
[  122.456185] Bluetooth: hci3: command tx timeout
[  122.518352] Bluetooth: hci5: command tx timeout
[  122.582572] Bluetooth: hci6: command tx timeout
[  122.646568] Bluetooth: hci7: command tx timeout
[  122.647067] Bluetooth: hci4: command tx timeout
[  124.247628] Bluetooth: hci0: command tx timeout
[  124.311332] Bluetooth: hci1: command tx timeout
[  124.502724] Bluetooth: hci2: command tx timeout
[  124.503663] Bluetooth: hci3: command tx timeout
[  124.566472] Bluetooth: hci5: command tx timeout
[  124.630398] Bluetooth: hci6: command tx timeout
[  124.694387] Bluetooth: hci4: command tx timeout
[  124.695371] Bluetooth: hci7: command tx timeout
[  126.294647] Bluetooth: hci0: command tx timeout
[  126.358599] Bluetooth: hci1: command tx timeout
[  126.550416] Bluetooth: hci3: command tx timeout
[  126.550437] Bluetooth: hci2: command tx timeout
[  126.614395] Bluetooth: hci5: command tx timeout
[  126.678503] Bluetooth: hci6: command tx timeout
[  126.742640] Bluetooth: hci7: command tx timeout
[  126.743117] Bluetooth: hci4: command tx timeout
[  128.342381] Bluetooth: hci0: command tx timeout
[  128.406484] Bluetooth: hci1: command tx timeout
[  128.598378] Bluetooth: hci3: command tx timeout
[  128.599392] Bluetooth: hci2: command tx timeout
[  128.663523] Bluetooth: hci5: command tx timeout
[  128.728919] Bluetooth: hci6: command tx timeout
[  128.790931] Bluetooth: hci7: command tx timeout
[  128.791448] Bluetooth: hci4: command tx timeout
[  182.769010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.772892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.776410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.792918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.801215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.842416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.850105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.853880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.860919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.866754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.898801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.903813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.912997] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.920992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.925827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.940877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.944746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.955342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.967125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.971547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.973962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.983054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.988983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.997120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.999744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.002816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.025036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.027815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.039105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.065604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.157573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.172101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.175878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.205016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.221909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.235484] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.263691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.268211] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.291916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.315779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.854356] Bluetooth: hci0: command tx timeout
[  184.918373] Bluetooth: hci1: command tx timeout
[  185.046608] Bluetooth: hci4: command tx timeout
[  185.111440] Bluetooth: hci2: command tx timeout
[  185.174423] Bluetooth: hci3: command tx timeout
[  185.177332] Bluetooth: hci5: command tx timeout
[  185.302485] Bluetooth: hci6: command tx timeout
[  185.430882] Bluetooth: hci7: command tx timeout
[  186.902331] Bluetooth: hci0: command tx timeout
[  186.966570] Bluetooth: hci1: command tx timeout
[  187.094854] Bluetooth: hci4: command tx timeout
[  187.158349] Bluetooth: hci2: command tx timeout
[  187.222789] Bluetooth: hci5: command tx timeout
[  187.223240] Bluetooth: hci3: command tx timeout
[  187.350835] Bluetooth: hci6: command tx timeout
[  187.478401] Bluetooth: hci7: command tx timeout
[  188.950336] Bluetooth: hci0: command tx timeout
[  189.014470] Bluetooth: hci1: command tx timeout
[  189.143359] Bluetooth: hci4: command tx timeout
[  189.206663] Bluetooth: hci2: command tx timeout
[  189.270377] Bluetooth: hci3: command tx timeout
[  189.270821] Bluetooth: hci5: command tx timeout
[  189.398376] Bluetooth: hci6: command tx timeout
[  189.526611] Bluetooth: hci7: command tx timeout
[  190.999335] Bluetooth: hci0: command tx timeout
[  191.062743] Bluetooth: hci1: command tx timeout
[  191.192302] Bluetooth: hci4: command tx timeout
[  191.254370] Bluetooth: hci2: command tx timeout
[  191.319312] Bluetooth: hci5: command tx timeout
[  191.319758] Bluetooth: hci3: command tx timeout
[  191.447353] Bluetooth: hci6: command tx timeout
[  191.574812] Bluetooth: hci7: command tx timeout
[  242.419416] syz-executor.6 (3024) used greatest stack depth: 24400 bytes left
[  244.785159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.792043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.798152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.807401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.813853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.972906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.981025] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.984000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.997771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.003223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.055951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.062147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.091892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.106926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.113394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.127718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.133483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.136179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.153559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.170830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.174196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.191586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.200355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.217871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.229187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.407408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.428513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.431187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.440066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.443831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.466632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.473048] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.475827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.491445] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.515917] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.516033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.556938] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.559036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.588935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.616848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.870532] Bluetooth: hci0: command tx timeout
[  247.062359] Bluetooth: hci1: command tx timeout
[  247.190346] Bluetooth: hci2: command tx timeout
[  247.318491] Bluetooth: hci4: command tx timeout
[  247.446455] Bluetooth: hci3: command tx timeout
[  247.513324] Bluetooth: hci5: command tx timeout
[  247.702379] Bluetooth: hci7: command tx timeout
[  247.766421] Bluetooth: hci6: command tx timeout
[  248.919858] Bluetooth: hci0: command tx timeout
[  249.111506] Bluetooth: hci1: command tx timeout
[  249.239653] Bluetooth: hci2: command tx timeout
[  249.367565] Bluetooth: hci4: command tx timeout
[  249.495642] Bluetooth: hci3: command tx timeout
[  249.560365] Bluetooth: hci5: command tx timeout
[  249.751639] Bluetooth: hci7: command tx timeout
[  249.814380] Bluetooth: hci6: command tx timeout
[  250.966339] Bluetooth: hci0: command tx timeout
[  251.158348] Bluetooth: hci1: command tx timeout
[  251.289317] Bluetooth: hci2: command tx timeout
[  251.415345] Bluetooth: hci4: command tx timeout
[  251.543323] Bluetooth: hci3: command tx timeout
[  251.606345] Bluetooth: hci5: command tx timeout
[  251.798582] Bluetooth: hci7: command tx timeout
[  251.862467] Bluetooth: hci6: command tx timeout
[  253.014396] Bluetooth: hci0: command tx timeout
[  253.206368] Bluetooth: hci1: command tx timeout
[  253.334530] Bluetooth: hci2: command tx timeout
[  253.462545] Bluetooth: hci4: command tx timeout
[  253.590602] Bluetooth: hci3: command tx timeout
[  253.654352] Bluetooth: hci5: command tx timeout
[  253.849318] Bluetooth: hci7: command tx timeout
[  253.910628] Bluetooth: hci6: command tx timeout
[  307.067099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.071878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.076890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.087148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.089942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.099088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.104335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.110099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.114859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.129913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.189092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.193175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.202191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.212832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.217092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.257010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.273576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.277915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.292859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.298779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.517668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.522216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.525935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.539944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.541794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.547699] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.549393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.552646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.561705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.562125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.575622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.587658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.593126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.597744] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.603986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.614665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.635823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.645529] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.647492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.666908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.208379] Bluetooth: hci0: command tx timeout
[  309.209721] Bluetooth: hci1: command tx timeout
[  309.334390] Bluetooth: hci2: command tx timeout
[  309.398727] Bluetooth: hci3: command tx timeout
[  309.655371] Bluetooth: hci5: command tx timeout
[  309.718678] Bluetooth: hci7: command tx timeout
[  309.783357] Bluetooth: hci6: command tx timeout
[  309.847685] Bluetooth: hci4: command tx timeout
[  311.254641] Bluetooth: hci1: command tx timeout
[  311.255384] Bluetooth: hci0: command tx timeout
[  311.382605] Bluetooth: hci2: command tx timeout
[  311.446386] Bluetooth: hci3: command tx timeout
[  311.702609] Bluetooth: hci5: command tx timeout
[  311.768336] Bluetooth: hci7: command tx timeout
[  311.830957] Bluetooth: hci6: command tx timeout
[  311.895571] Bluetooth: hci4: command tx timeout
[  313.303660] Bluetooth: hci1: command tx timeout
[  313.304167] Bluetooth: hci0: command tx timeout
[  313.430492] Bluetooth: hci2: command tx timeout
[  313.494550] Bluetooth: hci3: command tx timeout
[  313.750348] Bluetooth: hci5: command tx timeout
[  313.815416] Bluetooth: hci7: command tx timeout
[  313.878493] Bluetooth: hci6: command tx timeout
[  313.942461] Bluetooth: hci4: command tx timeout
[  315.350757] Bluetooth: hci0: command tx timeout
[  315.351759] Bluetooth: hci1: command tx timeout
[  315.479441] Bluetooth: hci2: command tx timeout
[  315.543093] Bluetooth: hci3: command tx timeout
[  315.798766] Bluetooth: hci5: command tx timeout
[  315.862637] Bluetooth: hci7: command tx timeout
[  315.926842] Bluetooth: hci6: command tx timeout
[  315.990945] Bluetooth: hci4: command tx timeout
[  369.586525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.589730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.597860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.606950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.613026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.662785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.666372] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.674753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.683949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.689821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.729243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.755629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.759798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.804722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.812814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.873431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.886805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.915785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.941813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.973901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.986431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.989955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.993517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.995542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.997192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.002562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.006422] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.015910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.032771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.037215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.046584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.080475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.083111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.099609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.110865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.125481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.134923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.149874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.156502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.176639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.671674] Bluetooth: hci0: command tx timeout
[  371.735371] Bluetooth: hci1: command tx timeout
[  371.990390] Bluetooth: hci2: command tx timeout
[  372.118442] Bluetooth: hci4: command tx timeout
[  372.118667] Bluetooth: hci5: command tx timeout
[  372.120446] Bluetooth: hci3: command tx timeout
[  372.246536] Bluetooth: hci6: command tx timeout
[  372.310351] Bluetooth: hci7: command tx timeout
[  373.719413] Bluetooth: hci0: command tx timeout
[  373.783283] Bluetooth: hci1: command tx timeout
[  374.038503] Bluetooth: hci2: command tx timeout
[  374.166397] Bluetooth: hci3: command tx timeout
[  374.166916] Bluetooth: hci5: command tx timeout
[  374.167583] Bluetooth: hci4: command tx timeout
[  374.294343] Bluetooth: hci6: command tx timeout
[  374.358646] Bluetooth: hci7: command tx timeout
[  375.767723] Bluetooth: hci0: command tx timeout
[  375.830807] Bluetooth: hci1: command tx timeout
[  376.086344] Bluetooth: hci2: command tx timeout
[  376.214582] Bluetooth: hci5: command tx timeout
[  376.215510] Bluetooth: hci4: command tx timeout
[  376.216010] Bluetooth: hci3: command tx timeout
[  376.342372] Bluetooth: hci6: command tx timeout
[  376.406441] Bluetooth: hci7: command tx timeout
[  377.814621] Bluetooth: hci0: command tx timeout
[  377.880280] Bluetooth: hci1: command tx timeout
[  378.134692] Bluetooth: hci2: command tx timeout
[  378.262411] Bluetooth: hci3: command tx timeout
[  378.262570] Bluetooth: hci5: command tx timeout
[  378.263797] Bluetooth: hci4: command tx timeout
[  378.391389] Bluetooth: hci6: command tx timeout
[  378.455773] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:11:21  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000003 RCX=ffff88800e4d697c RDX=0000000000000004
RSI=ffffffff85c1bac0 RDI=ffff88801577de10 RBP=ffffffff85c1bac0 RSP=ffff88800e4d6940
R8 =0000000000000001 R9 =ffff88800e4d6a68 R10=000000000003b0c2 R11=0000000000011831
R12=ffff88801577de10 R13=ffff88800e4d697c R14=0000000000000004 R15=0000000000000004
RIP=ffffffff815114dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f2aa44b6540 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2aa46a1620 CR3=000000002e16c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000003 RBX=000000000000002a RCX=ffffffff8138b5ba RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888034cff500 RSP=ffff8880345bfbf0
R8 =0000000000000000 R9 =ffffed100699feb0 R10=ffff888034cff583 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=ffff8880345bfc70 R15=0000000000000000
RIP=ffffffff8172e698 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e77af6820 CR3=0000000009f4a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000