Warning: Permanently added '[localhost]:26466' (ECDSA) to the list of known hosts. 2025/11/17 00:03:01 fuzzer started 2025/11/17 00:03:01 dialing manager at localhost:37161 syzkaller login: [ 52.648864] cgroup: Unknown subsys name 'net' [ 52.716319] cgroup: Unknown subsys name 'cpuset' [ 52.744845] cgroup: Unknown subsys name 'rlimit' 2025/11/17 00:03:12 syscalls: 200 2025/11/17 00:03:12 code coverage: enabled 2025/11/17 00:03:12 comparison tracing: enabled 2025/11/17 00:03:12 extra coverage: enabled 2025/11/17 00:03:12 setuid sandbox: enabled 2025/11/17 00:03:12 namespace sandbox: enabled 2025/11/17 00:03:12 Android sandbox: enabled 2025/11/17 00:03:12 fault injection: enabled 2025/11/17 00:03:12 leak checking: enabled 2025/11/17 00:03:12 net packet injection: enabled 2025/11/17 00:03:12 net device setup: enabled 2025/11/17 00:03:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/17 00:03:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/17 00:03:12 USB emulation: enabled 2025/11/17 00:03:12 hci packet injection: enabled 2025/11/17 00:03:12 wifi device emulation: enabled 2025/11/17 00:03:12 802.15.4 emulation: enabled 2025/11/17 00:03:12 fetching corpus: 0, signal 0/0 (executing program) 2025/11/17 00:03:13 starting 8 fuzzer processes 00:03:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r1 = socket(0x26, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x420000, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x46}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000340)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) socketpair(0x2c, 0xa, 0x4, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r5, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x501, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xc2000010) read$hiddev(r3, &(0x7f0000000540)=""/185, 0xb9) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r5, 0x300, 0x0, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x3ff, 0x74}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040800) r6 = socket(0x1f, 0x1, 0x2) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000840), 0xffff, 0x400200) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f0000000880)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x3) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe87}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) 00:03:13 executing program 1: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb92c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63feb7c2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x101480, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000000) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x7f, 0xf7}, 0x1}, 0x20, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040085}, 0x8004) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffc00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a962675}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x841) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x8015) socketpair(0x25, 0x80000, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x130, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8040}, 0x10) socketpair(0x29, 0x3, 0x3, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x80) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80640, 0x0) read$snapshot(r7, &(0x7f0000000e00)=""/113, 0x71) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000e80)=0x1) 00:03:13 executing program 7: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000040)={0x1, 0x3ff}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000080)={{0x1, 0x3, 0xa36, 0xa2, 0xffff235f, 0x7fffffff}, 0x3ae, [0x5, 0x5, 0x100, 0xf113, 0xff, 0x100, 0x8e9e, 0x6, 0x83, 0x7f, 0x7, 0x401, 0x2, 0x400, 0x2, 0x9, 0xa, 0x58, 0x6, 0x2, 0xdf3f, 0x8f, 0x5, 0x2, 0x8, 0x8000, 0x0, 0x0, 0x8894, 0x40, 0x4, 0x8, 0xf8, 0x1, 0xfffffff9, 0x3, 0x1f, 0x4, 0x14f, 0x2, 0x81, 0x80, 0x3, 0x6, 0xe7b, 0xf8f, 0x8, 0x9, 0x0, 0x2, 0x101, 0x3, 0x2, 0x23a3, 0x7, 0x80, 0x14a, 0x3, 0x9, 0x1, 0x1ff, 0x7, 0xffff81c9, 0x1, 0x100, 0x3, 0x4, 0xfffffffb, 0x1, 0xff, 0x81, 0xff, 0x4, 0x4, 0x151, 0x7, 0x7, 0x7ff, 0x400, 0xfffffffa, 0xb38, 0xffffffff, 0x10001, 0x8000, 0x7daee3e9, 0x0, 0x8e, 0x40, 0x88, 0xd6, 0x2, 0x5, 0x9, 0xfffffffc, 0x25, 0x6, 0x5, 0x8001, 0x7, 0xa4, 0x10000, 0x3, 0x9f48, 0x0, 0x8, 0x39, 0x80, 0xc1, 0x4, 0x4, 0x4, 0x8e5c, 0x1, 0x7ff, 0x4, 0xffff, 0x1, 0xc2, 0x400, 0xffffffff, 0x10001, 0x4, 0x7, 0xfffffffc, 0x10001, 0x2, 0x0, 0x6, 0x2, 0xf2, 0x1bba, 0xfffffff8, 0x7, 0x0, 0x3, 0x3, 0x1, 0x8000, 0x9, 0x1125, 0x0, 0x100, 0x9, 0x0, 0x6, 0x0, 0x93, 0x800, 0x80000001, 0x9, 0x9, 0x7fff, 0x4, 0x4, 0x8, 0x2, 0x0, 0x4, 0x200, 0x0, 0x2ac, 0x800, 0xeec49730, 0x1, 0x5, 0x100, 0x3f, 0x0, 0x8, 0x0, 0x5, 0x4, 0xed, 0x1f, 0x2, 0x4, 0x6, 0xfffffff7, 0x2, 0x7, 0xffffffff, 0x5, 0x5, 0x6, 0xa3, 0x2, 0x2, 0x7, 0x5, 0x100, 0x6, 0x4, 0xad6c, 0x7, 0x5, 0x8ba, 0xb103, 0x4, 0x8, 0x1, 0x9, 0x9, 0x414, 0x3, 0x6, 0x8, 0x80000000, 0x3, 0x0, 0x8, 0x6, 0x2, 0x7, 0x6, 0x4, 0x1bfa5d81, 0x9, 0x6, 0x2, 0x2, 0x4, 0x7, 0xffff, 0x7f, 0xf3, 0xd1, 0x8001, 0x800, 0x5, 0x3, 0x0, 0x10001, 0xffff, 0x9, 0x1, 0x3, 0xfffffffb, 0x81, 0xdee1, 0xbe35, 0x8, 0x7, 0xe2, 0x3f, 0x6, 0x10000, 0x2, 0x5, 0x380000, 0x4d9a, 0xc024, 0x4, 0x8, 0x8, 0xffffffff, 0x800, 0x8, 0x2, 0x1, 0x401, 0x1000, 0x80000000, 0xffffffff, 0x6, 0x7f, 0xfffffff7, 0x9, 0x20, 0x2, 0x3f, 0x7, 0x0, 0x2, 0x2, 0xa2, 0x101, 0x1, 0x5a, 0x80000000, 0x0, 0x0, 0x8, 0xfffffff7, 0xff, 0x0, 0x80, 0x5, 0xfff, 0x3, 0x0, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0xf0f6, 0x4, 0x9, 0x147, 0x9, 0x2, 0x3ad800, 0xffffffff, 0xffffa38f, 0x2, 0xfff, 0x1ebeaf54, 0x0, 0x401, 0x4, 0x8, 0xffffff7f, 0x844, 0xfffffffe, 0x2, 0xffff, 0x2, 0x7f, 0x400, 0x1f, 0x6, 0x1c1e99e7, 0x3ff, 0x86, 0xca40, 0x6, 0x7, 0x3, 0x26a, 0x9, 0x2, 0x7fff, 0x7, 0xffffff7f, 0x1000, 0x100, 0x100, 0xaab3, 0x8, 0x1, 0x0, 0x7fff, 0x74, 0x40, 0x1, 0x4, 0x800, 0xd7, 0x0, 0x3, 0x800, 0x9, 0x7fff, 0xfffffabc, 0x56, 0x1, 0x6, 0x80000001, 0x1, 0x1, 0x2, 0xfff, 0x0, 0x6, 0x2, 0x8001, 0x200, 0x5, 0x6, 0x8001, 0x8, 0x7, 0xffff, 0x8, 0x3, 0x6, 0x7fffffff, 0x0, 0x5, 0x7, 0xfffffff9, 0x10001, 0x3, 0x4, 0xf104, 0x1f, 0x3, 0xfa8, 0xfffffffc, 0x6aa, 0x5, 0x6, 0x4, 0xffffff80, 0x1, 0xff, 0x5, 0x9, 0x4ddb, 0x5, 0xff, 0x7, 0x0, 0x5, 0x7, 0x5, 0x3, 0x8, 0x7bd, 0x1, 0x8, 0x1, 0x48, 0xff, 0x2, 0x4, 0x1, 0x0, 0xffff, 0xff, 0x2, 0x3f, 0x5, 0x3, 0x200, 0x4, 0x8, 0x9, 0x200, 0x17, 0x20, 0x8001, 0x4, 0x7ff, 0x7fffffff, 0x8000, 0x3, 0xfffff001, 0x9, 0x5, 0x1000, 0x80, 0x91d, 0x89c, 0x2, 0x0, 0x3ff, 0x5, 0xd295, 0x101, 0x100, 0x8, 0x2, 0x4, 0x7, 0x4, 0x56, 0x8, 0x3, 0x87, 0x7, 0x80000000, 0x7, 0x0, 0x4, 0x1, 0x9, 0x7, 0x400, 0x200, 0x1, 0x100, 0x20, 0x91f, 0x7ff, 0x5e, 0x6, 0x9, 0x9, 0x6, 0x9, 0x6, 0x7, 0x40, 0x3a, 0x7, 0x80, 0x6, 0x0, 0x4, 0x1f, 0x3, 0x7, 0x17c2, 0x2, 0x5, 0x3, 0x0, 0x40, 0x2, 0x9, 0x9, 0xce, 0xde, 0x9, 0xcf, 0x80000000, 0x0, 0x8, 0x400, 0x9, 0x0, 0x7, 0x100, 0xfffffff8, 0x200, 0x400, 0x5, 0x9, 0x400, 0x5, 0x664f, 0x9, 0x1, 0x5, 0xc9, 0x400, 0x8, 0x400, 0x9, 0x7fffffff, 0x4, 0x7, 0x200, 0xffffffff, 0x5, 0x2, 0x7ca6d2ed, 0x9, 0x1, 0x1, 0x9, 0xfffffff7, 0xfbdd, 0x7, 0x7, 0x5, 0xfffffff7, 0x0, 0x401, 0x4, 0xb96, 0x6, 0x0, 0x7, 0x63f, 0x7fe00000, 0x6, 0x0, 0x7fff, 0x81, 0x8, 0x8, 0x3, 0x10000, 0x8000, 0x7, 0xfae6, 0xfff, 0x5, 0x9, 0x2, 0x6, 0xffff7fff, 0x6, 0x9, 0x9, 0x3, 0x0, 0x400, 0x4, 0x0, 0x4, 0x1, 0x6, 0x7f, 0x10000, 0x5, 0x10001, 0x3, 0x400, 0x1ff, 0x0, 0x9, 0x9, 0x565e, 0xe6, 0x40, 0x7f, 0x10001, 0x1, 0x2, 0x8001, 0x25, 0x0, 0x7, 0x9, 0xff, 0x8, 0xd49, 0x2, 0x4, 0x400, 0x48b95746, 0x1, 0x4, 0x7, 0xfffffff8, 0x9, 0x9, 0x400, 0x8a22, 0x7, 0xfffffffa, 0xffff, 0x5, 0x0, 0xc16c, 0x5, 0x0, 0x5, 0x0, 0x9, 0x7, 0x3ff, 0x7, 0x6, 0x7, 0xffffffff, 0x10001, 0x1f, 0xfff, 0x1, 0x80000001, 0x5, 0x8, 0x1, 0x8, 0x10000, 0x0, 0xffffffff, 0x800, 0x6, 0x1, 0x700000, 0x800, 0x6, 0xbf, 0x5, 0x3, 0x3, 0x4, 0x7ff, 0x3, 0x800, 0xfffffff9, 0x8, 0x4, 0x7, 0x9efa, 0x80000001, 0xffffffff, 0x7, 0x1, 0x2, 0x8, 0x1, 0x8, 0xfffffff7, 0x100, 0xbce, 0x6, 0xdc43, 0x8, 0x8, 0x1000, 0x2, 0x80, 0x10001, 0x1, 0x4, 0x20, 0x3, 0x7, 0x200, 0x6, 0x6, 0xfff, 0xfffffffe, 0x2, 0xfec7, 0x6, 0x7ff, 0x7, 0x0, 0x9, 0x100, 0x4, 0xa7d0, 0x2, 0x9, 0x7fffffff, 0x5, 0xcd, 0x7, 0x7fcb, 0x3f, 0x1ff, 0x7, 0xfffffffe, 0x7, 0x10000, 0x1, 0x6, 0x10000, 0x2, 0x7f, 0x1, 0x9, 0x4, 0x9, 0x2, 0x7, 0x4, 0x2, 0x4, 0x2, 0x4, 0x8000, 0x4, 0x20, 0x2, 0x8, 0x3dc, 0x0, 0x7ff, 0x6f, 0x1, 0xff, 0x7fffffff, 0x7ff, 0x7df, 0x35, 0x6be, 0x40, 0xfffffffe, 0xc9, 0x8, 0x8, 0x7, 0x1, 0x3, 0x7, 0x5, 0x1, 0xff, 0x0, 0x7ff, 0x8000, 0x49, 0x800, 0x0, 0x10000000, 0x5, 0x6, 0x3f, 0x5, 0x1, 0x1ba1, 0xf0c2, 0x8, 0x22b, 0x5fc, 0xfbe, 0x1, 0x0, 0x768, 0x52, 0x7, 0x1000000, 0x3, 0x6, 0x5, 0x4, 0x0, 0x7f, 0x8, 0x1, 0xfffffff7, 0x0, 0xaf, 0x6c98, 0x6, 0x8, 0xffff, 0x9, 0x606b, 0x7, 0x5, 0x200, 0x1ff, 0x7, 0x93, 0x7ff, 0x563, 0x7, 0x699cf3a1, 0x9, 0x200, 0x10000, 0x526, 0x3, 0x5, 0x4, 0x4, 0x401, 0x2d, 0x1, 0x8000, 0xffffff96, 0x5, 0x5, 0xe3, 0x7, 0x52, 0x8, 0x2e2c, 0x1, 0x0, 0x8, 0x5, 0x0, 0x2, 0x7fffffff, 0x3, 0xd1f, 0x10000, 0x4, 0x80000000, 0x5, 0xa9, 0x7, 0x3, 0x800, 0xd561, 0x80, 0x9, 0x3ff, 0x9, 0x5d6e, 0x7, 0x80000001, 0x401, 0x4, 0xc510, 0x8, 0x8, 0x1, 0x8, 0x7, 0x7, 0x4, 0x1f, 0xfff, 0xffff, 0xb243, 0x2, 0x200, 0x73011b02, 0x8, 0x6, 0x3, 0x9, 0x4, 0x1, 0x10001, 0x7fff, 0x1, 0x9, 0x3, 0xf33, 0x0, 0x10000, 0x6, 0x8000, 0x3, 0x1, 0xfe000000, 0x9, 0x8, 0x3b550f12, 0x81, 0xffffff01, 0xffffff01, 0x2, 0x6, 0x101, 0x7, 0x81, 0x8, 0x5, 0x1, 0x4, 0x3e7e4187, 0x7, 0x7fff, 0x80000001, 0xffff, 0x0, 0x8, 0x7, 0x401, 0x3, 0x1000, 0x3ff, 0x7, 0x0, 0x4, 0x5, 0x7, 0x2, 0x7, 0x4, 0x5, 0x2, 0x7ff, 0xb3b5, 0xff, 0x8, 0xfffffffa, 0x80, 0x7, 0x4, 0x2, 0x7, 0xa01, 0xffff, 0x1, 0xf000, 0x4, 0x5bb63533, 0x8001, 0x0, 0x5, 0x701, 0x1000, 0x1000, 0x7ff, 0x4, 0xb0, 0x0, 0x6c36, 0xff, 0xffffff74, 0x0, 0x8, 0x2, 0x5, 0x0, 0x9, 0x0, 0x0, 0x6, 0x2, 0xfffff694, 0x7fff, 0x80000001, 0x1000, 0x3, 0x101, 0x2, 0xfff, 0xffff8000, 0x9, 0x1, 0x400, 0x8, 0x800, 0x401, 0x7, 0x31, 0x6, 0xc46, 0x2, 0x9, 0x35, 0xf1, 0x5, 0xffffffff, 0x8, 0x8, 0x8, 0x1ff, 0x6e, 0x7, 0x0, 0x8000, 0x80000000, 0x3ff, 0x9, 0x80000000, 0xba86, 0x400, 0x5, 0x80000001, 0x4, 0x3, 0xd375, 0x3ff, 0x2, 0xcac1, 0x100, 0x1, 0x8]}) r0 = syz_open_dev$hiddev(&(0x7f00000010c0), 0x6, 0xa203) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000001100)) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000001140)) r1 = syz_open_dev$hiddev(&(0x7f0000001180), 0x3669, 0x204080) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xe16e4c5a2d0f2344}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3d}}}}, ["", ""]}, 0x20}}, 0x20000020) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) read$hiddev(r1, &(0x7f0000001300)=""/195, 0xc3) r3 = syz_open_dev$hiddev(&(0x7f0000001400), 0x80000001, 0x400000) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000001440)={0x3, 0x1, 0x9, 0x9, 0x9d88, 0x6, 0x14000000, 0x1, 0x5, 0x5, 0x6, 0x3, 0x2, 0x5}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x885) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x14}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000001700)={0x1, 0x41e4b7280d3430a7, 0x3}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000001780)={0x2, 0x100, 0x4, 0x2, 0x64, 0x3, 0x2, 0x4, 0x1ff, 0x7, 0xd65, 0x8, 0x3f, 0x80}) 00:03:13 executing program 2: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x3f, 0x9, 0x200}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x10001) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x80, 0x7f, 0xb25, 0x400, 0x3}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x4d, 0x8, &(0x7f00000000c0)="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"}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x4040, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000580)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c7c48ffa025a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40841}, 0x1) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000780)) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000007c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000840)="7f1856f35c5a728c315692b7a1af97281d261c0764c0e444a148d51b473c1860c1e257d385c70c64a4db17020e32b4da226568b51ecdbab4a424f11f13056a7596e9ad1a54fb636f38bcce6d118cd0177c707a4f0d7a5f8775e8033de91e1575af38d1e511f863d13a6b9001cbdf02377547") r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000008c0)) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000d00)={0x183, 0x1a, &(0x7f0000000900)="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"}) 00:03:13 executing program 3: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "bd00175c01ba1d6a2a8820ffa5b75fd3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "da0fdf6f3d597f467a4a8df32c0739ea"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x6c}}, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40808}, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x5}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a88}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000004}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x70c0b90}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r3) socketpair(0x7896280e7591adec, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000009c0)="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") sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4b5956ec, 0xf}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x94, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x94}}, 0x40) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c80), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x80, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3c3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x44041) 00:03:13 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000400)={0x104, 0x15}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000440)={0x1, 0x8, 0x9, 0xfffff000, 0x8, "3779c61edf2e35a7a00d5304aa1521e785866b", 0xffff8000, 0x47}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000004c0)={0x7fff, 0x0, 0x6, 0x2, 0x1b, "efa5f19c4bc768566fe138f8b8a82957fd7567"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000500)={0x20, "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"}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000740)) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000b80)={0x14e, 0xa, &(0x7f0000000780)="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"}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000bc0)="4d6360efd264d873d42e2c792a5d7514dec83f623232d749b1b6a58b4a42cb787d8e3e1e35a574b3183b3807d404376a3648479757cae201c4388e5688e84a334db7cd25cbd3bf21b833068397a22ff27d8c8cee86ea506cba8a1a4dbe5de7360c40bf2efa737ba4eb41ee9de391683726dfdebaaa278239178f8c80c3c5459eac8d87ebf4857cad47c55573b42f4b901131e4d7975825bed9a00540724151a72c90c78a1a720e70877be1b1da7956f77aa736f4d173e7bdd2a98e") r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000c80)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2200, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) 00:03:13 executing program 5: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) socketpair(0xf, 0x800, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x39}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_io_uring_setup(0x7666, &(0x7f0000000300)={0x0, 0x1246, 0x3, 0x2, 0x1b7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0x0, 0x908, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x238, r3, 0x104, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0x68, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x81, 0xe, "f29db1e44cf7ab47d1bd109c5d87"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12a, 0x7f, [@fast_bss_trans={0x37, 0x92, {0x14, 0x2, "307919475ffd89c90555744972b66d43", "ed0879ca7b737fdb36c48dfb4df490109ba6c5f9cb1ebf74f2e42c6f94c0cd4e", "97f0ccb5c0acb6a3faa862aba28f7b21b4b96eb6e5643f3cbaafa5623288868d", [{0x3, 0x24, "baf3812b6c169e6671eb01e91411228385b340e8ecfe0e6ee0fc016999af760170478c70"}, {0x1, 0x18, "23cd7cd0bf1b9ac4cb8c24edb7e967662f0edcaf85647573"}]}}, @preq={0x82, 0x46, @not_ext={{0x0, 0x1}, 0xdb, 0x0, 0x80000001, @device_a, 0x4, "", 0x18000, 0x0, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x3cf6}, {{0x1}, @broadcast}, {{0x1}, @device_a, 0x20}, {{0x1, 0x0, 0x1}, @device_a, 0x3fc00}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x1, 0x25, 0x1}}, @random={0xa4, 0x40, "aeb3ec24a847d1831a979b1aadb85a2e6592393e393edfd521112e20aaf6dc98bdf2cbdaf30e78a0ed0b0ddeb5f185ca4ed9a16dc214e29018147370cfb71800"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7e, 0x7f, [@link_id={0x65, 0x12, {@random="0b3a5c994f9b", @device_b}}, @perr={0x84, 0x5b, {0x2, 0x5, [@ext={{}, @device_b, 0x5, @broadcast, 0x7}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @ext={{}, @device_b, 0x4, @device_a, 0x29}, @ext={{}, @device_a, 0x2, @device_a, 0xd}, @ext={{}, @broadcast, 0xfffffff3, @device_a, 0xc}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xf5, 0x68}}]}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}]}]}, 0x238}}, 0x24000801) r5 = socket(0x15, 0x5, 0x9) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3622}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x72}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x400c001) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x110, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x800000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x9, 0x10001, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1000, 0x9, 0xfff000]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40800}, 0x40004) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000e40)=""/94) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r6, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x44800) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x8801) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000) [ 63.467772] audit: type=1400 audit(1763337793.903:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:03:13 executing program 6: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x3, 0x200, 0x3}) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f0000000080)) getrusage(0xffffffffffffffff, &(0x7f0000000140)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2e060, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0x16, 0x38, 0x11, 0xd, 0x1, 0x2, 0x0, 0x4e}) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000280)={0x1, 0x200, 0x100, 0x7, 0x0, 0xffff0000}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000300)=""/176, 0xb0) wait4(0x0, 0x0, 0x2, &(0x7f00000003c0)) r2 = syz_open_dev$hiddev(&(0x7f0000000480), 0x9, 0x84000) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f00000004c0)) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x114, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4011) wait4(0xffffffffffffffff, &(0x7f0000000800), 0x4, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/210}) read$hiddev(0xffffffffffffffff, &(0x7f00000009c0)=""/207, 0xcf) r5 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000b00)={0x1, 0x200, 0x7e3c, 0xdf, 0x0, 0x0, 0x2, 0x6, 0x2, 0x8, 0x1, 0xfff, 0x0, 0x9}) [ 64.633883] ================================================================== [ 64.635226] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 64.636417] Read of size 2 at addr ffff88800b003538 by task kworker/u11:1/289 [ 64.639648] [ 64.640281] CPU: 0 UID: 0 PID: 289 Comm: kworker/u11:1 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 64.640316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.640333] Workqueue: hci0 hci_cmd_work [ 64.640369] Call Trace: [ 64.640379] [ 64.640388] dump_stack_lvl+0xca/0x120 [ 64.640420] print_report+0xcb/0x610 [ 64.640452] ? __virt_addr_valid+0x100/0x5d0 [ 64.640481] ? hci_cmd_work+0x66d/0x6d0 [ 64.640512] ? hci_cmd_work+0x66d/0x6d0 [ 64.640543] kasan_report+0xca/0x100 [ 64.640575] ? hci_cmd_work+0x66d/0x6d0 [ 64.640610] hci_cmd_work+0x66d/0x6d0 [ 64.640643] process_one_work+0x8e1/0x19c0 [ 64.640686] ? __pfx_process_one_work+0x10/0x10 [ 64.640720] ? rcuwait_wake_up+0x27/0x290 [ 64.640755] ? move_linked_works+0x172/0x270 [ 64.640782] ? assign_work+0x196/0x240 [ 64.640817] worker_thread+0x67e/0xe90 [ 64.640852] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.640882] ? __pfx_worker_thread+0x10/0x10 [ 64.640918] kthread+0x3c8/0x740 [ 64.640949] ? __pfx_kthread+0x10/0x10 [ 64.640980] ? ret_from_fork+0x79/0x7a0 [ 64.641005] ? lock_release+0xc8/0x290 [ 64.641043] ? __pfx_kthread+0x10/0x10 [ 64.641075] ret_from_fork+0x67a/0x7a0 [ 64.641099] ? __pfx_ret_from_fork+0x10/0x10 [ 64.641125] ? __switch_to+0x759/0x1060 [ 64.641158] ? __pfx_kthread+0x10/0x10 [ 64.641207] ret_from_fork_asm+0x1a/0x30 [ 64.641248] [ 64.641256] [ 64.667991] Allocated by task 287: [ 64.668609] kasan_save_stack+0x24/0x50 [ 64.669325] kasan_save_track+0x14/0x30 [ 64.670021] __kasan_slab_alloc+0x59/0x70 [ 64.670751] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 64.671651] __alloc_skb+0x2ab/0x370 [ 64.672312] hci_cmd_sync_alloc+0x34/0x300 [ 64.673077] __hci_cmd_sync_sk+0xf7/0x5c0 [ 64.673832] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 64.674667] hci_dev_open_sync+0x10ef/0x1f60 [ 64.675438] hci_power_on+0xdb/0x5d0 [ 64.676109] process_one_work+0x8e1/0x19c0 [ 64.676863] worker_thread+0x67e/0xe90 [ 64.677563] kthread+0x3c8/0x740 [ 64.678167] ret_from_fork+0x67a/0x7a0 [ 64.678856] ret_from_fork_asm+0x1a/0x30 [ 64.679575] [ 64.679878] Freed by task 288: [ 64.680442] kasan_save_stack+0x24/0x50 [ 64.681135] kasan_save_track+0x14/0x30 [ 64.681857] kasan_save_free_info+0x3a/0x60 [ 64.682630] __kasan_slab_free+0x43/0x70 [ 64.683352] kmem_cache_free+0x26f/0x500 [ 64.684086] kfree_skbmem+0x18a/0x1f0 [ 64.684751] sk_skb_reason_drop+0x10e/0x1b0 [ 64.685513] vhci_read+0x3d5/0x5d0 [ 64.686151] vfs_read+0x1eb/0xc70 [ 64.686764] ksys_read+0x121/0x240 [ 64.687385] do_syscall_64+0xbf/0x430 [ 64.688077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.688976] [ 64.689294] The buggy address belongs to the object at ffff88800b003500 [ 64.689294] which belongs to the cache skbuff_head_cache of size 232 [ 64.691485] The buggy address is located 56 bytes inside of [ 64.691485] freed 232-byte region [ffff88800b003500, ffff88800b0035e8) [ 64.693558] [ 64.693861] The buggy address belongs to the physical page: [ 64.694822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb003 [ 64.696180] memcg:ffff88800a2d0d81 [ 64.696801] anon flags: 0x100000000000000(node=0|zone=1) [ 64.697735] page_type: f5(slab) [ 64.698321] raw: 0100000000000000 ffff8880096c78c0 ffffea000034bc00 dead000000000005 [ 64.699646] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800a2d0d81 [ 64.700965] page dumped because: kasan: bad access detected [ 64.701930] [ 64.702235] Memory state around the buggy address: [ 64.703070] ffff88800b003400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.704319] ffff88800b003480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 64.705569] >ffff88800b003500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.706828] ^ [ 64.707710] ffff88800b003580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 64.708940] ffff88800b003600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.710178] ================================================================== [ 64.711541] Disabling lock debugging due to kernel taint [ 64.715569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.716968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.723711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.726218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.730597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.754150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.758054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.762540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.766366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.769033] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.829097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.830429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.832101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.834065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.835162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.836684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.837435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.839080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.841029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.842438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.845037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.845260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.856090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.858533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.860124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.870116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.870228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.873720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.877985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.881445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.886168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.887659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.891698] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.893295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.895024] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.898481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.906592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.908508] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.910518] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.919690] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.794864] Bluetooth: hci1: command tx timeout [ 66.795297] Bluetooth: hci0: command tx timeout [ 66.921836] Bluetooth: hci4: command tx timeout [ 66.922855] Bluetooth: hci3: command tx timeout [ 66.985932] Bluetooth: hci2: command tx timeout [ 66.986342] Bluetooth: hci7: command tx timeout [ 66.986689] Bluetooth: hci5: command tx timeout [ 66.987122] Bluetooth: hci6: command tx timeout [ 68.844833] Bluetooth: hci0: command tx timeout [ 68.845347] Bluetooth: hci1: command tx timeout [ 68.969887] Bluetooth: hci3: command tx timeout [ 68.970387] Bluetooth: hci4: command tx timeout [ 69.034957] Bluetooth: hci6: command tx timeout [ 69.035451] Bluetooth: hci5: command tx timeout [ 69.036645] Bluetooth: hci7: command tx timeout [ 69.037143] Bluetooth: hci2: command tx timeout [ 70.890854] Bluetooth: hci1: command tx timeout [ 70.891294] Bluetooth: hci0: command tx timeout [ 71.017860] Bluetooth: hci3: command tx timeout [ 71.018291] Bluetooth: hci4: command tx timeout [ 71.082831] Bluetooth: hci7: command tx timeout [ 71.083271] Bluetooth: hci5: command tx timeout [ 71.083625] Bluetooth: hci2: command tx timeout [ 71.084272] Bluetooth: hci6: command tx timeout [ 72.938290] Bluetooth: hci0: command tx timeout [ 72.939416] Bluetooth: hci1: command tx timeout [ 73.065872] Bluetooth: hci4: command tx timeout [ 73.066319] Bluetooth: hci3: command tx timeout [ 73.130856] Bluetooth: hci6: command tx timeout [ 73.131278] Bluetooth: hci2: command tx timeout [ 73.131663] Bluetooth: hci5: command tx timeout [ 73.132368] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:03:15 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880183d7618 R8 =0000000000000000 R9 =ffffed1001610046 R10=000000000000005b R11=000000003a555043 R12=000000000000005b R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556c1ba62018 CR3=000000000bf99000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=732f70756f7267632f73662f7379732f XMM01=6563696c732e6d65747379732f70756f XMM02=ffffffffffff0000ffffffffffff0000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000556c1bad7290 XMM06=0000556c1babf4400000556c1bada7c0 XMM07=00000000000000000000000000000000 XMM08=000000000000000000006d6574737973 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8175bda7 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85e1fd40 RSP=ffff888017ab78c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff8175bcf6 R13=0000000000000206 R14=ffff88800a35b780 R15=ffff888008c4b500 RIP=ffffffff81529b87 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5f65f298c0 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557fa1cd89e8 CR3=000000000df25000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=00000000ff0000000000000000000000 XMM02=00000000ff0000000000000000000000 XMM03=7269762f736563697665642f7379732f XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000