Warning: Permanently added '[localhost]:6753' (ECDSA) to the list of known hosts. 2023/02/24 17:13:37 fuzzer started 2023/02/24 17:13:37 dialing manager at localhost:41417 syzkaller login: [ 45.495430] cgroup: Unknown subsys name 'net' [ 45.586316] cgroup: Unknown subsys name 'rlimit' 2023/02/24 17:13:52 syscalls: 209 2023/02/24 17:13:52 code coverage: enabled 2023/02/24 17:13:52 comparison tracing: enabled 2023/02/24 17:13:52 extra coverage: enabled 2023/02/24 17:13:52 setuid sandbox: enabled 2023/02/24 17:13:52 namespace sandbox: enabled 2023/02/24 17:13:52 Android sandbox: enabled 2023/02/24 17:13:52 fault injection: enabled 2023/02/24 17:13:52 leak checking: enabled 2023/02/24 17:13:52 net packet injection: enabled 2023/02/24 17:13:52 net device setup: enabled 2023/02/24 17:13:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/24 17:13:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/24 17:13:52 USB emulation: enabled 2023/02/24 17:13:52 hci packet injection: enabled 2023/02/24 17:13:52 wifi device emulation: enabled 2023/02/24 17:13:52 802.15.4 emulation: enabled 2023/02/24 17:13:52 fetching corpus: 0, signal 0/0 (executing program) 2023/02/24 17:13:54 starting 8 fuzzer processes 17:13:54 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0xfff, 0xa984}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r1 = syz_io_uring_setup(0x62e, &(0x7f0000000100)={0x0, 0xfd6a, 0x0, 0x1, 0x2cc, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r0, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2004, @fd_index=0x4, 0x400, &(0x7f0000000240)=[{&(0x7f0000000200)=""/48, 0x30}], 0x1, 0xb}, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0xbe, 0x9, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x0, 0x16, 0x1, 0x3, 0x10000, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x5000}, 0x4000080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000580)={0x1, 0x2, {0x2, 0x2, 0x8, 0x3, 0x7ff}, 0x5}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xfc, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x30}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x76}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5b3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4001}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000007c0), 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000800)) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000880)={0x2, 0x100, 0xfffffffd}) 17:13:54 executing program 1: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_1\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @val={0x5, 0x1, 0x9, 0x7, 0x40, 0xffff}, @arp=@generic={0x108, 0xd, 0x6, 0x3, 0x1, @multicast, "97d92b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, "ccd9"}}, 0x23) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3d5681, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'geneve0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'bridge_slave_1\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000280)={'macvlan1\x00', @link_local}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000300)={0x0, 0x5, [@remote, @multicast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}]}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)={0x0, 0x9, [@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x81}, @link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote]}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000380)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x7, 0x1, 0x4, 0x1}, {0x28, 0x20, 0x43, 0x2}, {0x8, 0x20, 0x3f}, {0x3, 0x3f, 0x1, 0x84203197}, {0x7f, 0x9, 0x1}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x303000, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x8, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @remote, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @remote, @multicast]}) [ 60.731364] audit: type=1400 audit(1677258834.562:6): avc: denied { execmem } for pid=261 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:13:54 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8044800}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x1ee30f2ad8a5366b, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x18000000}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb87}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = socket(0x3, 0x4, 0xb8c) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r0, 0x202, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xfc, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x44}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000980)={{{@in=@local, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "addc28990cf3096990effb9f8bf459ac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "30462aa31d751a2be67384c35ff5c36c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6410aeb8a502dc47924d0c60427f8fe"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x10000000) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c00), 0x48042, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x100, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 17:13:54 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0xfffff78c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'ipvlan0\x00', @local}) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)={0x0, 0x5, [@multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000480)={0x2, 0x1, {0x2, 0x2, 0x3ff, 0x3, 0x80000001}, 0xfffffff9}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)="a01e4714fd8e1f2d0492d7c6abf5bfe8613b467f4539414c585bb13c4dfdc12d18ad0229664dd93e9b6471ca2069acd5681573b06c46c0d14898", 0x3a}, 0x1, 0x0, 0x0, 0x4008048}, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000600)={'nr0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001640)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd=r2, 0x401, &(0x7f0000000640)="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", 0x1000, 0x0, 0x1}, 0x7fff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001680)={0x6b80, 0x1, {0x3, 0x2, 0x3, 0x1, 0x800}, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) 17:13:54 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @any, 0x65, 0x1}, 0xe) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x0, 0x608, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x367}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9b1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8c1) r0 = socket(0x1a, 0x4, 0x44b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x4054) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x44}}, 0x50801) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r6 = socket(0x6, 0xa, 0x3ff) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000700)=0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20044081) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x50}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e3d64d6f02779d5e5e0103028c913818"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40450) 17:13:54 executing program 6: ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000000)=""/170) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000000c0)={0x2, 0x3, 0x418, 0x738, 0x100, 0x3}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000100)={0x1, 0x2, 0x5, 0x401, 0xffff, 0x7b}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x1e243, 0x0) read$hiddev(r0, &(0x7f0000000180)=""/84, 0x54) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000400)=0x2) r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0x7f, 0x202980) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000480)={0x2, 0x3, 0x5, 0x5, 0x6e76a7d2}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xdec17e97514aee7d}, 0x810) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x40441, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000007c0)={'macvtap0\x00'}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x10c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x470b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9c}]}, 0x10c}, 0x1, 0x0, 0x0, 0x90}, 0x2000) fstat(r3, &(0x7f0000000a40)) 17:13:54 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101180, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x729}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x240080c0}, 0x20008010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x5, 0x9348, 0x1ff, {0x4, 0x988}, 0x31f, 0x20}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x600000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x200000c2}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x18400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000004c0)={0x0, 0x200, 0x3ffc00, {0x1, 0x3}, 0x3, 0x7f}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x10}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008801) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f5, 0x1, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044010}, 0x24044810) r3 = socket(0xb, 0xa, 0xd0a2) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000740)=0x1, 0x4) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f00000007c0)={0x7cc, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7ff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0577c2095b57b7a12328fcda5b9bd41dee3f04f7131bc5b987945a40fa5df2f4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x61c, 0x8, 0x0, 0x1, [{0x618, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e7399321f8ccd0701556ebd82c66e2b35927a9ea2a687b5d662ada95155f262"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @private2, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x7cc}}, 0x40000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x90, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x90}}, 0x20000000) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001300), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x64, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x26}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 17:13:54 executing program 7: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x8, 0x40, 0x3, 0x40, 0x9f6, 0xa0f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x5a, 0x4, 0x1ff}]}) r2 = eventfd2(0xa7, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r2, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000180)={0x7, 0x10000, 0x7, {0x6, 0x2}, 0x5}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe42}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x114}}, 0xc0) r4 = eventfd(0x9) read$eventfd(r4, &(0x7f0000000480), 0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000004c0)) getgid() r5 = syz_io_uring_setup(0x44c2, &(0x7f0000000500)={0x0, 0xb439, 0x8, 0x1, 0x128}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000600)=r4, 0x1) read$eventfd(r2, &(0x7f0000000640), 0x8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000680)={0x6, 0xfffff001, 0x10001, 0x826e, 0x100, 0x9}) [ 62.076823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.076834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.079741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.084333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.085291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.090909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.093543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.097119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.102850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.103804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.106101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.109889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.142138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.145672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.150278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.159124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.161626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.166975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.168868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.169912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.190744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.193357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.195326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.197716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.199316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.201184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.202184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.203136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.204723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.205680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.211754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.219353] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.220954] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.223484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.234927] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.251653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.277346] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.279106] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.281252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.315031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.361790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.363280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.157577] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 64.158316] Bluetooth: hci0: command 0x0409 tx timeout [ 64.159846] Bluetooth: hci1: command 0x0409 tx timeout [ 64.161392] [ 64.161634] ====================================================== [ 64.162423] WARNING: possible circular locking dependency detected [ 64.163218] 6.2.0-next-20230224 #1 Not tainted [ 64.163797] ------------------------------------------------------ [ 64.168885] syz-executor.2/273 is trying to acquire lock: [ 64.169639] ffff888034368880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 64.171004] [ 64.171004] but task is already holding lock: [ 64.171767] ffff888034368920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 64.173045] [ 64.173045] which lock already depends on the new lock. [ 64.173045] [ 64.174087] [ 64.174087] the existing dependency chain (in reverse order) is: [ 64.175126] [ 64.175126] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 64.176274] __mutex_lock+0x133/0x14a0 [ 64.176896] hci_cmd_sync_work+0x1e6/0x320 [ 64.177550] process_one_work+0xa0f/0x1790 [ 64.178200] worker_thread+0x63b/0x1260 [ 64.178828] kthread+0x2e9/0x3a0 [ 64.179362] ret_from_fork+0x2c/0x50 [ 64.179940] [ 64.179940] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 64.181015] __lock_acquire+0x2d56/0x6380 [ 64.181656] lock_acquire.part.0+0xea/0x320 [ 64.182327] __flush_work+0x109/0xd80 [ 64.182932] __cancel_work_timer+0x39c/0x4e0 [ 64.183592] hci_cmd_sync_clear+0x52/0x250 [ 64.184244] hci_unregister_dev+0xf9/0x410 [ 64.184893] vhci_release+0x80/0x100 [ 64.185477] __fput+0x263/0xa40 [ 64.186002] task_work_run+0x174/0x280 [ 64.186627] do_exit+0xad8/0x2800 [ 64.187169] do_group_exit+0xd4/0x2a0 [ 64.187749] __x64_sys_exit_group+0x3e/0x50 [ 64.188399] do_syscall_64+0x3f/0x90 [ 64.188967] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 64.189718] [ 64.189718] other info that might help us debug this: [ 64.189718] [ 64.190742] Possible unsafe locking scenario: [ 64.190742] [ 64.191510] CPU0 CPU1 [ 64.192108] ---- ---- [ 64.192708] lock(&hdev->cmd_sync_work_lock); [ 64.193317] lock((work_completion)(&hdev->cmd_sync_work)); [ 64.194374] lock(&hdev->cmd_sync_work_lock); [ 64.195287] lock((work_completion)(&hdev->cmd_sync_work)); [ 64.196045] [ 64.196045] *** DEADLOCK *** [ 64.196045] [ 64.196814] 1 lock held by syz-executor.2/273: [ 64.197394] #0: ffff888034368920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 64.198698] [ 64.198698] stack backtrace: [ 64.199275] CPU: 1 PID: 273 Comm: syz-executor.2 Not tainted 6.2.0-next-20230224 #1 [ 64.200282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.201359] Call Trace: [ 64.201711] [ 64.202019] dump_stack_lvl+0x91/0xf0 [ 64.202557] check_noncircular+0x263/0x2e0 [ 64.203139] ? __pfx_check_noncircular+0x10/0x10 [ 64.203777] ? queued_spin_lock_slowpath+0xd1/0xc50 [ 64.204449] __lock_acquire+0x2d56/0x6380 [ 64.205012] ? lock_is_held_type+0x9f/0x120 [ 64.205586] ? __pfx___lock_acquire+0x10/0x10 [ 64.206193] ? __pfx_register_lock_class+0x10/0x10 [ 64.206869] ? __wait_for_common+0x394/0x550 [ 64.207463] ? __pfx_lock_release+0x10/0x10 [ 64.208046] lock_acquire.part.0+0xea/0x320 [ 64.208624] ? __flush_work+0xdd/0xd80 [ 64.209162] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 64.209822] ? __flush_work+0xdd/0xd80 [ 64.210351] ? rcu_read_lock_sched_held+0x42/0x80 [ 64.210985] ? trace_lock_acquire+0x170/0x1e0 [ 64.211595] ? __flush_work+0xdd/0xd80 [ 64.212143] ? lock_acquire+0x32/0xc0 [ 64.212683] ? __flush_work+0xdd/0xd80 [ 64.213236] __flush_work+0x109/0xd80 [ 64.213777] ? __flush_work+0xdd/0xd80 [ 64.214326] ? __pfx_mark_lock.part.0+0x10/0x10 [ 64.214984] ? __pfx___flush_work+0x10/0x10 [ 64.215586] ? lock_acquire.part.0+0xea/0x320 [ 64.216212] ? hci_cmd_sync_clear+0x45/0x250 [ 64.216827] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 64.217497] ? hci_cmd_sync_clear+0x45/0x250 [ 64.218098] ? rcu_read_lock_sched_held+0x42/0x80 [ 64.218763] ? trace_lock_acquire+0x170/0x1e0 [ 64.219383] ? lock_is_held_type+0x9f/0x120 [ 64.219988] ? mark_held_locks+0x9e/0xe0 [ 64.220557] __cancel_work_timer+0x39c/0x4e0 [ 64.221159] ? __pfx___cancel_work_timer+0x10/0x10 [ 64.221816] ? __cancel_work_timer+0x2aa/0x4e0 [ 64.222430] ? __pfx___cancel_work_timer+0x10/0x10 [ 64.223094] ? lock_release+0x1e3/0x710 [ 64.223652] ? __pfx_lock_release+0x10/0x10 [ 64.224256] ? do_raw_write_lock+0x11e/0x3b0 [ 64.224863] ? __pfx_vhci_release+0x10/0x10 [ 64.225461] hci_cmd_sync_clear+0x52/0x250 [ 64.226047] ? __pfx_vhci_release+0x10/0x10 [ 64.226649] hci_unregister_dev+0xf9/0x410 [ 64.227223] vhci_release+0x80/0x100 [ 64.227744] __fput+0x263/0xa40 [ 64.228203] task_work_run+0x174/0x280 [ 64.228748] ? __pfx_task_work_run+0x10/0x10 [ 64.229350] ? do_raw_spin_unlock+0x53/0x220 [ 64.229962] do_exit+0xad8/0x2800 [ 64.230447] ? lock_release+0x1e3/0x710 [ 64.231031] ? __pfx_lock_release+0x10/0x10 [ 64.231632] ? do_raw_spin_lock+0x125/0x270 [ 64.232201] ? __pfx_do_exit+0x10/0x10 [ 64.232741] do_group_exit+0xd4/0x2a0 [ 64.233264] __x64_sys_exit_group+0x3e/0x50 [ 64.233845] do_syscall_64+0x3f/0x90 [ 64.234346] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 64.235039] RIP: 0033:0x7f509b489b19 [ 64.235538] Code: Unable to access opcode bytes at 0x7f509b489aef. [ 64.236339] RSP: 002b:00007ffda41a8c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.237315] RAX: ffffffffffffffda RBX: 00007ffda41a9468 RCX: 00007f509b489b19 [ 64.238243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 64.239166] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffda41a9468 [ 64.240084] R10: 0000000000000020 R11: 0000000000000246 R12: 00007f509b4e3233 [ 64.241012] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 64.241947] [ 64.285580] Bluetooth: hci5: command 0x0409 tx timeout [ 64.286329] Bluetooth: hci6: command 0x0409 tx timeout [ 64.349542] Bluetooth: hci2: command 0x0409 tx timeout [ 64.350318] Bluetooth: hci7: command 0x0409 tx timeout [ 64.413453] Bluetooth: hci3: command 0x0409 tx timeout [ 66.205875] Bluetooth: hci1: command 0x041b tx timeout [ 66.206716] Bluetooth: hci0: command 0x041b tx timeout [ 66.334479] Bluetooth: hci6: command 0x041b tx timeout [ 66.334936] Bluetooth: hci5: command 0x041b tx timeout [ 66.397494] Bluetooth: hci7: command 0x041b tx timeout [ 66.397871] Bluetooth: hci2: command 0x041b tx timeout [ 66.461446] Bluetooth: hci3: command 0x041b tx timeout [ 66.975055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.975723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.976292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.977354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.978327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.979086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.253461] Bluetooth: hci0: command 0x040f tx timeout [ 68.253880] Bluetooth: hci1: command 0x040f tx timeout [ 68.381430] Bluetooth: hci5: command 0x040f tx timeout [ 68.381847] Bluetooth: hci6: command 0x040f tx timeout [ 68.445575] Bluetooth: hci2: command 0x040f tx timeout [ 68.445977] Bluetooth: hci7: command 0x040f tx timeout [ 68.510420] Bluetooth: hci3: command 0x040f tx timeout [ 69.022426] Bluetooth: hci4: command 0x0409 tx timeout [ 70.302476] Bluetooth: hci1: command 0x0419 tx timeout [ 70.302933] Bluetooth: hci0: command 0x0419 tx timeout [ 70.430447] Bluetooth: hci6: command 0x0419 tx timeout [ 70.430896] Bluetooth: hci5: command 0x0419 tx timeout [ 70.493475] Bluetooth: hci7: command 0x0419 tx timeout [ 70.493879] Bluetooth: hci2: command 0x0419 tx timeout [ 70.558426] Bluetooth: hci3: command 0x0419 tx timeout [ 71.070423] Bluetooth: hci4: command 0x041b tx timeout [ 73.117431] Bluetooth: hci4: command 0x040f tx timeout VM DIAGNOSIS: 17:13:58 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=00000000000101f2 RSI=ffffffff82193cf8 RDI=0000000000000007 RBP=ffff8880090501a0 RSP=ffff88800ffa7240 R8 =0000000000000007 R9 =0000000000010000 R10=00000000000101f2 R11=0000000000000001 R12=00000000000101f2 R13=ffff888009050050 R14=ffff888009050048 R15=ffff8880090501a9 RIP=ffffffff82193cfe RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe6203d83000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe6203d81000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74f70211f0 CR3=00000000161de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2037353a33313a373120343220626546 XMM01=5d3634383935312e34362020205b203a XMM02=783020646e616d6d6f63203a31696368 XMM03=3935312e34362020205b203a6c656e72 XMM04=2034353a33313a373120343220626546 XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff88800c927190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe51c6102000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe51c6100000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0d3a865710 CR3=00000000161de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=7465756c42205d3038323336332e3236 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=2078742039303430783020646e616d6d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000