Warning: Permanently added '[localhost]:37746' (ECDSA) to the list of known hosts. 2023/02/26 13:24:32 fuzzer started 2023/02/26 13:24:32 dialing manager at localhost:41417 syzkaller login: [ 44.466515] cgroup: Unknown subsys name 'net' [ 44.552641] cgroup: Unknown subsys name 'rlimit' 2023/02/26 13:24:47 syscalls: 211 2023/02/26 13:24:47 code coverage: enabled 2023/02/26 13:24:47 comparison tracing: enabled 2023/02/26 13:24:47 extra coverage: enabled 2023/02/26 13:24:47 setuid sandbox: enabled 2023/02/26 13:24:47 namespace sandbox: enabled 2023/02/26 13:24:47 Android sandbox: enabled 2023/02/26 13:24:47 fault injection: enabled 2023/02/26 13:24:47 leak checking: enabled 2023/02/26 13:24:47 net packet injection: enabled 2023/02/26 13:24:47 net device setup: enabled 2023/02/26 13:24:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/26 13:24:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/26 13:24:47 USB emulation: enabled 2023/02/26 13:24:47 hci packet injection: enabled 2023/02/26 13:24:47 wifi device emulation: enabled 2023/02/26 13:24:47 802.15.4 emulation: enabled 2023/02/26 13:24:47 fetching corpus: 0, signal 0/0 (executing program) 2023/02/26 13:24:48 starting 8 fuzzer processes 13:24:48 executing program 0: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48844) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3c}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000001) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044054}, 0x8804) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x21}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x100c0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x916, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x77}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x48080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x29}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf17420fdb05843a6}, 0x20004810) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x996}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) 13:24:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffff976) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x20, 0x2, 0x3, 0x0, 0xf, "8edcf94ebee79b3c88552a7dc8a2d87d9ae7fe", 0x9, 0x4}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x1b2, 0x9, &(0x7f0000000080)="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"}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000004c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000500)={0x7fffffff, 0x5, 0x7, 0x80, 0x5, "98ed90251861ba15fc3365ae3a54d7e6f6c50d", 0xda1, 0x1}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000940)={0x49, 0x12, &(0x7f0000000540)="074e0cdbcba7570fde8ab00acb8746c3db8d92f9a6afc3e609f352d32a666c415ab13f089475250e5e3f29f64970dfea7a606c62d2204c205f381817a936afc001b41223cfac82d6dcda0d7d2cbcffeace276f43b6da04720f3d4bc415beb28f31f86b90ba54e97bb6288d9d4874e181cb5958a74e161c6d3f7f2c531946a74309f8b03c4706e9fe0ba669f7e08f4a278698f94b69048cba26a0a5cb36e21b696434c551e857e26d6e19c563e88afb3fd6dc7a7cf8de2648128f48bca7596a0abd0fe8c04f9b6e57e0b8eaea3cace5b2d07274a75e5fedc258566f7db54a09de85bcfb5b579d8c62dac8a1656250969f5463ef841670b3e9b8310375cf06e4d4694ee746f52b23a6c1e6e695aa1497122e49a81d601161b5a3f4080f13723a0f63e0313bb725e42b342ca403a549851d8e8f5673036e66c5c1091ea1ea458df0ab9c3417ae5512cd92eece1280239d02f961cca7d8bf40b9f8c2f4972de2654b770c408babd290db5f04d8b656181a49671e1b7cec06aace7b53b31e812c3882c9c81b8f05d3f240f1476b0476b37b94bbf5fe361ec46f4f4ea00c4e00db7fcdd780b1c38eb939560854f8b7436ea6249f0a3a4ee7ebf0c0ae3d87ef30c85aed95c305072845cff02fde50753cd8d575ab460874ed87ac5ce1df64a2a21fc326a55c572698df6f4cb0c441742bcef602ecf4e18979ed9600a63688b8ee523d48ec4a3191e02bcd94d089586403c9771762cf5e47de82ed967c8ea05985b79e0dc6b51df224ca7d5db2158df6a0388a9cc978dc65a0656038021b226a10fce056c70dfd38ec8067ae248a0b0dfcebf0670d2159ac7527c835c2cece9d5115a9a550053c974f30cf1e43a9cdc01e74a641d80906e73a6fb99acfb1d8021dc25a74fba627b0f21215080da54afd8f6016b3e3352beeaf51f45178095f143a26747c48ce19cee3a09b4c295b1d380affc54df446c4679e922c489353190d75f6fed81c0a9af5a2d167a6e83bdbcf63124a2546ee6b541e44b20e6f5c3269bce41bdf6e5c834f7bd786b8034bd74431ed474abf9ea7c02a249a96ed5690775646385a36b245c9e15b5a05196b997143ea92132466c62a6f0773e024194500bd6dd334274b8fade34cd9cd4e6779dc066b696f803a5c7b51118cd5b421934241aa161058c5d434032cc83a00a38185baa69c35bab79113a8a06a1fdf28ffdb14e1bf59b5f4684fd898cd891ca96479b2e827d7eef9239ca9b0e572134cb9e032598309210a44bd0c1e9aedc673b57d4ca2e0e80451192a1e58d8d6112b4634431d51c150174dd944c21f863f471be038d8286ede1475f18d2359940f1ef24b1b704a3c5a35d1703a2e6e8b4d6c096f26903f65f6388787fc4d9fe2fa9c5a5cfc9c9413ee627e70281085a456db61a81d3878d6d46c92a114ea26d5590f99d71fb0ba1e"}) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000980)={0x4, 0x7a000000, 0x3f, 0x0, 0x5, "e27f7a2fc07d3590a8baadb3091cfcca910ecb", 0x101, 0x1}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x0, 0x8ba, 0x4, 0x5, 0xf}}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000a00)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000a40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000ec0)={0xbf, 0x16, &(0x7f0000000ac0)="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"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSBRKP(r4, 0x5425, 0x3) socketpair(0x8, 0x6, 0x4, &(0x7f0000000f00)) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000f40)={0x6, 0x20, 0x80, 0x7, 0xd, "8e9ca6075e5fda373a86ed016adffb3212bb0e"}) 13:24:48 executing program 2: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x30) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f810000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f92}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x101}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1/../file0\x00'}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x1acc1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc4, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd56b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001780)={0x38c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x49}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r3, {0x8000, 0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001d00)={{0x1, 0x1, 0x18}, './file0\x00'}) 13:24:48 executing program 3: r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4804) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2c) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc}, 0xc0) getgroups(0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, r5}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r7) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x88}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {r8, r6}}, './file0\x00'}) r11 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) [ 58.712760] audit: type=1400 audit(1677417888.743:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:24:48 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7172db63df985100}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x49, 0x7, 0x3, 0x50, @private1, @local, 0x10, 0x40, 0xb20c, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x154, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x0, 0x1f, 0xdb}, {0xfff, 0xac, 0x4, 0x7ff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x20000003) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r0, 0x4, 0x2, 0x9, 0x59e3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x1, 0x100, 0x26}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'syztnl1\x00', r0, 0x2f, 0x36, 0x0, 0x6, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x80, 0x0, 0x20}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001f40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002480)={'syztnl0\x00', &(0x7f0000002400)={'syztnl0\x00', r0, 0x4, 0x1, 0x0, 0x32, 0x19, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast1, 0x8, 0x700, 0xff, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002540)={'ip6tnl0\x00', &(0x7f00000024c0)={'syztnl2\x00', r1, 0x0, 0x5, 0x40, 0x1, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x8010, 0x7, 0x41, 0x20}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002c80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002d40)={'ip6gre0\x00', &(0x7f0000002cc0)={'ip6_vti0\x00', r0, 0x29, 0x9, 0x80, 0x10000, 0x20, @remote, @private2, 0x700, 0x7, 0x4, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003680)={&(0x7f0000002d80)={0x8e8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb03a}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xabd9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x48ac}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x5b, 0x5, 0x3}, {0xff94, 0xe1, 0x1f, 0x80000001}, {0x7, 0x2, 0x5, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8528}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x8e8}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000003800)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003880), r10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x28, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x24000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000003980), 0xffffffffffffffff) 13:24:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24044880}, 0x40880) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@local]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004013}, 0x24000844) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) getsockname(r3, &(0x7f0000000440)=@rc, &(0x7f00000004c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40801) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r3) r5 = memfd_secret(0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008851) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x181001, 0x0) recvmsg(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/116, 0x74}, {&(0x7f00000008c0)=""/127, 0x7f}], 0x3}, 0x65) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x200, 0x1ff, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x90) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r8, 0x110, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}}, 0x800) 13:24:48 executing program 5: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x12c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff800000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x12c}, 0x1, 0x0, 0x0, 0x82}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x67}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804) getsockname(r0, &(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000a80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x390, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x92, 0x45, "3896b22a14d7d58922e2a2ad85259576c89b28f774ecc1f8dcca737d1604d3cdb1f9886fdd41226e2510d6c003088397eba6774e7fc5e4d4a1767ba6e31c87d4384ca9bed567813e07755ab1bfefecca4b8d242704a7ea120b286c55d5fc47400276857165af08b9cc2721f668a5adbab123805548d82f231a311fbfc7d3ecf186c0eadff1eaae30732172561047"}, @NL80211_ATTR_TESTDATA={0x73, 0x45, "c8e9584848aa799c17c48638343d00586b80d2d20f7268db609732bb97ca1908039a6147f6aa872d9b3192ed6eebb3b0c53496c39706ee9c1076a5be2540336f5a9a870925f3d0c777f758fca2fc78e6c80c6f60120c52d30c671bcbf9db50a3079baf84ceedb557430acce0f57f10"}, @NL80211_ATTR_TESTDATA={0x53, 0x45, "59f10b78f985064cc2e9fcddd5ab904a01eaec863b7ff1f8cb93800b768b99db45171807fb3aca6b4030d43fa36a025ac9f534d8fd0c297a1d9956060f6ac330b986a07bb319fc3b8762723e625b4e"}, @NL80211_ATTR_TESTDATA={0x59, 0x45, "4ea3de2290edd25b8b422fd6da47522f45e30f1d23ff4e2d134358d39e210f2319ad02b0669a92f1751731b6ab524442f9df418c62b31f2c079834bd7bbbffb7486b5edba40b89c810c1a7f2d614bc22948e751f52"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "5072955b2c3bcf27f6d7952cd86ba0f1d4527c9d9e"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "c3d63a5b40ec290352df51dbdff844983d3f7a6de665d80736be91c43f0981a880d9d121a9836209b26c2ea01f6d22ae86c00e857c9bd4e844d3dff74b80291a9013ac6637955ce1502bae52f3fba1512b9ac775024c1593b7df6ef04e4fbdd9fc2adbd0c735027d5feca42a4bcbca1ef8a1d2780c4a95bbee5d69965607087f14fe07503bbae6e352a9425192edb1764a14ec7e313332e0a3b9cb163f061a05d99454670da3"}, @NL80211_ATTR_TESTDATA={0xfa, 0x45, "dc978c0041709c38532e93a12992bb055379fee66077c6168ead5c8f6ecc17312cea4a381aa06b0f0e8f6f3aabeb8293f98202a9b273da1bea1347ab1103629605fb91b8b82bc320ea3747db3b09e7edf2a84b1f6e5cfc86d1119419508990f546788acb907107ae7cb242394bd5f052b5a8670d829688c3176002f0ccbdf6c5014062ec2953abe094125ec3a0e427c56b38762649e708042f03c87019d6c14ee2ff31ef4f26d6436d25316d58f6e9d392276bfbebb3a4ed68d2138c8b10dc11edc73685e56b8aeedd1a080fe47bb89e059b6ed2baa725a066c2a2d9c5bb3e5f1566bb0534197757a92dc55eddd7af8f137cea8f4bf6"}]}, 0x390}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000b80)="72b428fadfe5cb6e1bf3895856fe54b6ea9d5943de11e3742e3c7d63d95c4969d181a92ba9f8970a3b6bf76e41f193414e2d5ab3f1d593572fb5ee74bf13604b6ce5544985f67c16c13106a7baf0dcb34fbb42cea2feb488f9d8817f650f885d4ff9bda5f4c6898217309628844daad1c8cbd7c0a83b66208b5341da4a4a1dd51c1b6e70b65eb78d34714024ba7b121cd70c274af593c82ca23c3baae6aca5b389e03f814c18e180aeec050f16898b29a38ab4ce1529136ba68394aed7998a14f8149fab82505636f565afa11b4791b03b33012b646e76248041970451c909cc123d2b6ce403fe") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x411}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xdc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x44) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r2, {0x81, 0x1}}, './file0\x00'}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e40), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) 13:24:48 executing program 7: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0x81, 0xffff, 0x40, @private1, @loopback, 0x8, 0x8000, 0x5, 0x86}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x2, 0x4, 0x3, 0x800, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x700, 0x8, 0x4, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x80, 0x6, 0x40, @loopback, @private1, 0x7, 0x8, 0x7fff, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001f00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001880)={0x604, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x54}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x13}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x4f, 0xb5, 0x4}, {0x600, 0x4, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x1f, 0xcb, 0x7ff}, {0x7, 0x1, 0xcf, 0x4}]}}}]}}]}, 0x604}, 0x1, 0x0, 0x0, 0x20080}, 0x44801) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r14, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffffff00, 0x1, 0x0, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000010) [ 59.983346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.985538] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.987235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.988655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.991011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.992640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.993923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.998452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.009209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.014282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.043373] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.048214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.064477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.065663] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.067968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.071286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.071516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.073883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.075897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.076151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.078075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.078158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.079307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.081910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.083047] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.083476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.085574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.087186] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.088357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.091662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.093315] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.094561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.110194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.117651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.119915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.124013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.126316] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.128658] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.129754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.130036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.131973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.134364] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.066190] Bluetooth: hci0: command 0x0409 tx timeout [ 62.066224] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 62.067568] Bluetooth: hci1: command 0x0409 tx timeout [ 62.070086] [ 62.070320] ====================================================== [ 62.071062] WARNING: possible circular locking dependency detected [ 62.071794] 6.2.0-next-20230224 #1 Not tainted [ 62.072340] ------------------------------------------------------ [ 62.076981] syz-executor.6/275 is trying to acquire lock: [ 62.077625] ffff888034070880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 62.078875] [ 62.078875] but task is already holding lock: [ 62.079556] ffff888034070920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 62.080698] [ 62.080698] which lock already depends on the new lock. [ 62.080698] [ 62.081642] [ 62.081642] the existing dependency chain (in reverse order) is: [ 62.082505] [ 62.082505] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 62.083343] __mutex_lock+0x133/0x14a0 [ 62.083912] hci_cmd_sync_work+0x1e6/0x320 [ 62.084497] process_one_work+0xa0f/0x1790 [ 62.085092] worker_thread+0x63b/0x1260 [ 62.085673] kthread+0x2e9/0x3a0 [ 62.086151] ret_from_fork+0x2c/0x50 [ 62.086670] [ 62.086670] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 62.087652] __lock_acquire+0x2d56/0x6380 [ 62.088234] lock_acquire.part.0+0xea/0x320 [ 62.088837] __flush_work+0x109/0xd80 [ 62.089377] __cancel_work_timer+0x39c/0x4e0 [ 62.089983] hci_cmd_sync_clear+0x52/0x250 [ 62.090563] hci_unregister_dev+0xf9/0x410 [ 62.091146] vhci_release+0x80/0x100 [ 62.091668] __fput+0x263/0xa40 [ 62.092137] task_work_run+0x174/0x280 [ 62.092681] do_exit+0xad8/0x2800 [ 62.093169] do_group_exit+0xd4/0x2a0 [ 62.093716] __x64_sys_exit_group+0x3e/0x50 [ 62.094303] do_syscall_64+0x3f/0x90 [ 62.094817] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 62.095493] [ 62.095493] other info that might help us debug this: [ 62.095493] [ 62.096409] Possible unsafe locking scenario: [ 62.096409] [ 62.097101] CPU0 CPU1 [ 62.097650] ---- ---- [ 62.098191] lock(&hdev->cmd_sync_work_lock); [ 62.098741] lock((work_completion)(&hdev->cmd_sync_work)); [ 62.099689] lock(&hdev->cmd_sync_work_lock); [ 62.100506] lock((work_completion)(&hdev->cmd_sync_work)); [ 62.101186] [ 62.101186] *** DEADLOCK *** [ 62.101186] [ 62.101971] 1 lock held by syz-executor.6/275: [ 62.102525] #0: ffff888034070920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 62.103735] [ 62.103735] stack backtrace: [ 62.104267] CPU: 1 PID: 275 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1 [ 62.105191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 62.106179] Call Trace: [ 62.106503] [ 62.106786] dump_stack_lvl+0x91/0xf0 [ 62.107268] check_noncircular+0x263/0x2e0 [ 62.107807] ? __pfx_check_noncircular+0x10/0x10 [ 62.108428] __lock_acquire+0x2d56/0x6380 [ 62.108967] ? lock_is_held_type+0x9f/0x120 [ 62.109510] ? __pfx___lock_acquire+0x10/0x10 [ 62.110095] ? __pfx_register_lock_class+0x10/0x10 [ 62.110723] ? __wait_for_common+0x394/0x550 [ 62.111285] ? __pfx_lock_release+0x10/0x10 [ 62.111833] lock_acquire.part.0+0xea/0x320 [ 62.112379] ? __flush_work+0xdd/0xd80 [ 62.112884] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.113500] ? __flush_work+0xdd/0xd80 [ 62.114027] ? rcu_read_lock_sched_held+0x42/0x80 [ 62.114629] ? trace_lock_acquire+0x170/0x1e0 [ 62.115199] ? __flush_work+0xdd/0xd80 [ 62.115702] ? lock_acquire+0x32/0xc0 [ 62.116192] ? __flush_work+0xdd/0xd80 [ 62.116697] __flush_work+0x109/0xd80 [ 62.117184] ? __flush_work+0xdd/0xd80 [ 62.117704] ? __pfx_mark_lock.part.0+0x10/0x10 [ 62.118295] ? __pfx___flush_work+0x10/0x10 [ 62.118847] ? lock_acquire.part.0+0xea/0x320 [ 62.119416] ? hci_cmd_sync_clear+0x45/0x250 [ 62.119971] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.120584] ? hci_cmd_sync_clear+0x45/0x250 [ 62.121132] ? rcu_read_lock_sched_held+0x42/0x80 [ 62.121742] ? trace_lock_acquire+0x170/0x1e0 [ 62.122304] ? lock_is_held_type+0x9f/0x120 [ 62.122856] ? mark_held_locks+0x9e/0xe0 [ 62.123380] __cancel_work_timer+0x39c/0x4e0 [ 62.123928] ? __pfx___cancel_work_timer+0x10/0x10 [ 62.124529] ? __cancel_work_timer+0x2aa/0x4e0 [ 62.125096] ? __pfx___cancel_work_timer+0x10/0x10 [ 62.125718] ? lock_release+0x1e3/0x710 [ 62.126228] ? __pfx_lock_release+0x10/0x10 [ 62.126777] ? do_raw_write_lock+0x11e/0x3b0 [ 62.127340] ? __pfx_vhci_release+0x10/0x10 [ 62.127886] hci_cmd_sync_clear+0x52/0x250 [ 62.128415] ? __pfx_vhci_release+0x10/0x10 [ 62.128967] hci_unregister_dev+0xf9/0x410 [ 62.129496] vhci_release+0x80/0x100 [ 62.129987] __fput+0x263/0xa40 [ 62.130415] task_work_run+0x174/0x280 [ 62.130961] ? __pfx_task_work_run+0x10/0x10 [ 62.131542] ? do_raw_spin_unlock+0x53/0x220 [ 62.132097] do_exit+0xad8/0x2800 [ 62.132544] ? lock_release+0x1e3/0x710 [ 62.133060] ? __pfx_lock_release+0x10/0x10 [ 62.133627] ? do_raw_spin_lock+0x125/0x270 [ 62.134182] ? __pfx_do_exit+0x10/0x10 [ 62.134692] do_group_exit+0xd4/0x2a0 [ 62.135181] __x64_sys_exit_group+0x3e/0x50 [ 62.135725] do_syscall_64+0x3f/0x90 [ 62.136208] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 62.136862] RIP: 0033:0x7fe364baeb19 [ 62.137326] Code: Unable to access opcode bytes at 0x7fe364baeaef. [ 62.138095] RSP: 002b:00007ffc69e29e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 62.139025] RAX: ffffffffffffffda RBX: 00007ffc69e2a638 RCX: 00007fe364baeb19 [ 62.139906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 62.140775] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffc69e2a638 [ 62.141632] R10: 0000000000000020 R11: 0000000000000246 R12: 00007fe364c08233 [ 62.142478] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 62.143356] [ 62.143954] Bluetooth: hci4: command 0x0409 tx timeout [ 62.144603] Bluetooth: hci7: command 0x0409 tx timeout [ 62.192934] Bluetooth: hci5: command 0x0409 tx timeout [ 62.193627] Bluetooth: hci6: command 0x0409 tx timeout [ 62.194307] Bluetooth: hci2: command 0x0409 tx timeout [ 64.112777] Bluetooth: hci1: command 0x041b tx timeout [ 64.114448] Bluetooth: hci0: command 0x041b tx timeout [ 64.176741] Bluetooth: hci7: command 0x041b tx timeout [ 64.177417] Bluetooth: hci4: command 0x041b tx timeout [ 64.240857] Bluetooth: hci2: command 0x041b tx timeout [ 64.241515] Bluetooth: hci6: command 0x041b tx timeout [ 64.242215] Bluetooth: hci5: command 0x041b tx timeout [ 64.901437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.913185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.914984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.922025] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.923456] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.924722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.160734] Bluetooth: hci0: command 0x040f tx timeout [ 66.161450] Bluetooth: hci1: command 0x040f tx timeout [ 66.224721] Bluetooth: hci4: command 0x040f tx timeout [ 66.225758] Bluetooth: hci7: command 0x040f tx timeout [ 66.288745] Bluetooth: hci5: command 0x040f tx timeout [ 66.289424] Bluetooth: hci6: command 0x040f tx timeout [ 66.290116] Bluetooth: hci2: command 0x040f tx timeout [ 66.992716] Bluetooth: hci3: command 0x0409 tx timeout [ 68.208750] Bluetooth: hci1: command 0x0419 tx timeout [ 68.209483] Bluetooth: hci0: command 0x0419 tx timeout [ 68.272737] Bluetooth: hci7: command 0x0419 tx timeout [ 68.273431] Bluetooth: hci4: command 0x0419 tx timeout [ 68.336847] Bluetooth: hci2: command 0x0419 tx timeout [ 68.337511] Bluetooth: hci6: command 0x0419 tx timeout [ 68.338217] Bluetooth: hci5: command 0x0419 tx timeout [ 69.040761] Bluetooth: hci3: command 0x041b tx timeout [ 71.088783] Bluetooth: hci3: command 0x040f tx timeout VM DIAGNOSIS: 13:24:52 Registers: info registers vcpu 0 RAX=0000002980a6f88c RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000029 RSI=ffff88806ce28140 RDI=000000000005442e RBP=ffff88806ce28140 RSP=ffff88806ce09ee0 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000f1330 R11=0000000000000001 R12=000000000005442e R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce2b8c0 RIP=ffffffff811072f5 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe1e9584d000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe1e9584b000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0c6a2be090 CR3=0000000019760000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff88800f297190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe59d30e7000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe59d30e5000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd89112d028 CR3=000000000e164000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=7465756c42205d3436333433312e3036 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=2078742039303430783020646e616d6d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000