IOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x81, 0x80000000, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @private1, 0x87, 0x68f0026bf06d5ec3, 0x3b, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', r6, 0x29, 0x7, 0x3f, 0x7, 0x23, @local, @empty, 0xacad0423637381eb, 0x20, 0x1, 0x7}}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x1, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000840)=ANY=[], 0x3f, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c0001020a57e4c65a82cfa5408005000600060000f790000180060002000a1400000c0001800500030002000000100001800c00048008000200110000000c0001800500030024007d5700000000000004800800020011000000aa09c433ecd5add18f231f30310eca675f6cd4217c5b7ba955143f155c109e55b30e4772110a", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfffffffa, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) [ 1202.118303] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1202.149545] FAULT_INJECTION: forcing a failure. [ 1202.149545] name failslab, interval 1, probability 0, space 0, times 0 20:10:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x40, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r3) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f0000000340)=ANY=[@ANYBLOB="a5cccf289b21b7be0b504b01b9a922e6c637e7288341aa7b460100010000000000451c2189318290b66c73e18e19db814b90d9caf877d3d19e892380de9f7214b59c00"/76, @ANYRES32=r0, @ANYBLOB="0b0d8dc12d7cd1e42fce1d03ed63210d26f168199bae8f25dc475ef17411dee3341a6362f7ce31b9268fe3909288e563c85a2e24adfa4ba48b9ee369755f5e7e121efce50053cadd4c02a1800fe98087b6dfd0de027949ec5aa0bb599ae485008cf0f5bc6941437245317abae16d9b50c1984a7da1eb72f41f631a72f0fe0ba42b97", @ANYRES16=r4], 0x3f, 0x2) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) (async) sendfile(r8, 0xffffffffffffffff, 0x0, 0x2) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r9, 0x0) [ 1202.204207] CPU: 0 PID: 1289 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1202.212140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1202.221503] Call Trace: [ 1202.224209] dump_stack+0x1fc/0x2ef [ 1202.227874] should_fail.cold+0xa/0xf [ 1202.231701] ? setup_fault_attr+0x200/0x200 [ 1202.236139] ? retint_kernel+0x2d/0x2d [ 1202.240053] __should_failslab+0x115/0x180 [ 1202.244323] should_failslab+0x5/0x10 [ 1202.248162] kmem_cache_alloc+0x3f/0x370 [ 1202.252236] skb_clone+0x151/0x3d0 [ 1202.255796] netlink_deliver_tap+0x955/0xb00 [ 1202.260227] netlink_unicast+0x545/0x690 [ 1202.264311] ? netlink_sendskb+0x110/0x110 [ 1202.268567] ? _copy_from_iter_full+0x229/0x7c0 [ 1202.273268] ? __phys_addr_symbol+0x2c/0x70 [ 1202.277615] ? __check_object_size+0x17b/0x3e0 [ 1202.282217] netlink_sendmsg+0x6c3/0xc50 [ 1202.286310] ? aa_af_perm+0x230/0x230 [ 1202.290136] ? nlmsg_notify+0x1f0/0x1f0 [ 1202.294120] ? kernel_recvmsg+0x220/0x220 [ 1202.298302] ? nlmsg_notify+0x1f0/0x1f0 20:10:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1202.302303] sock_sendmsg+0xc3/0x120 [ 1202.306029] ___sys_sendmsg+0x7bb/0x8e0 [ 1202.310029] ? check_preemption_disabled+0x41/0x280 [ 1202.315060] ? copy_msghdr_from_user+0x440/0x440 [ 1202.319924] ? __fget+0x32f/0x510 [ 1202.323407] ? lock_downgrade+0x720/0x720 [ 1202.327573] ? check_preemption_disabled+0x41/0x280 [ 1202.332609] ? check_preemption_disabled+0x41/0x280 [ 1202.333905] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1202.337635] ? __fget+0x356/0x510 [ 1202.337653] ? do_dup2+0x450/0x450 [ 1202.337670] ? lock_downgrade+0x720/0x720 [ 1202.337685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1202.337701] ? __fdget+0x1d0/0x230 [ 1202.363079] __x64_sys_sendmsg+0x132/0x220 [ 1202.367428] ? __sys_sendmsg+0x1b0/0x1b0 [ 1202.371598] ? ksys_write+0x241/0x2a0 [ 1202.375421] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1202.380919] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1202.386736] ? do_syscall_64+0x21/0x620 [ 1202.390731] do_syscall_64+0xf9/0x620 [ 1202.394559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1202.399849] RIP: 0033:0x7ff51d9bf0d9 20:10:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4002, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1202.403660] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1202.423871] RSP: 002b:00007ff51bf31168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.431605] RAX: ffffffffffffffda RBX: 00007ff51dadef80 RCX: 00007ff51d9bf0d9 [ 1202.438972] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 1202.446254] RBP: 00007ff51bf311d0 R08: 0000000000000000 R09: 0000000000000000 20:10:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4060, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1202.453711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.461169] R13: 00007ffdc9b897bf R14: 00007ff51bf31300 R15: 0000000000022000 20:10:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pread64(r2, &(0x7f0000000280)=""/153, 0x99, 0x20) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x50, r5}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000080)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pread64(r2, &(0x7f0000000280)=""/153, 0x99, 0x20) (async) close(r1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) (async) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x50, r5}) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) (async) 20:10:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x40, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 64) close(r3) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async, rerun: 64) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f0000000340)=ANY=[@ANYBLOB="a5cccf289b21b7be0b504b01b9a922e6c637e7288341aa7b460100010000000000451c2189318290b66c73e18e19db814b90d9caf877d3d19e892380de9f7214b59c00"/76, @ANYRES32=r0, @ANYBLOB="0b0d8dc12d7cd1e42fce1d03ed63210d26f168199bae8f25dc475ef17411dee3341a6362f7ce31b9268fe3909288e563c85a2e24adfa4ba48b9ee369755f5e7e121efce50053cadd4c02a1800fe98087b6dfd0de027949ec5aa0bb599ae485008cf0f5bc6941437245317abae16d9b50c1984a7da1eb72f41f631a72f0fe0ba42b97", @ANYRES16=r4], 0x3f, 0x2) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 32) write$bt_hci(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (rerun: 32) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) (async, rerun: 64) sendfile(r8, 0xffffffffffffffff, 0x0, 0x2) (async, rerun: 64) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r9, 0x0) 20:10:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x40) r5 = accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x5) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b69873e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r7, @ANYRESOCT], 0x3f, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39cdc9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c77acbdda22a93172408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca462e90749f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b738a9c32427defa60238bf4af9c674591886ac0d81c86b54c22e1c0e244b732feb9f22aa113440c10a88f330f3be86f589703b2b56ed43c17c349c6cf3e84cf80863066a3e534d0b7fea707f2c44ef571ce5110ceb87bf78b730208", @ANYRESDEC=r8, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000280)) sendfile(r1, r5, &(0x7f0000000340)=0x7, 0x6) 20:10:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4003, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) (fail_nth: 4) 20:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1202.925336] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4004, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1203.021264] FAULT_INJECTION: forcing a failure. [ 1203.021264] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.064532] CPU: 0 PID: 1344 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1203.072369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1203.081732] Call Trace: [ 1203.084353] dump_stack+0x1fc/0x2ef [ 1203.088010] should_fail.cold+0xa/0xf [ 1203.091834] ? setup_fault_attr+0x200/0x200 [ 1203.096165] ? lock_acquire+0x170/0x3c0 [ 1203.100158] __should_failslab+0x115/0x180 [ 1203.104400] should_failslab+0x5/0x10 [ 1203.108208] __kmalloc+0x2ab/0x3c0 20:10:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x7fd, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df54"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 1203.111758] ? ieee80211_key_alloc+0x5b/0x1090 [ 1203.116348] ieee80211_key_alloc+0x5b/0x1090 [ 1203.120787] ieee80211_add_key+0x1fa/0x850 [ 1203.125047] nl80211_new_key+0x369/0xa90 [ 1203.129144] ? nl80211_parse_connkeys+0x940/0x940 [ 1203.134037] ? nl80211_pre_doit+0xa2/0x620 [ 1203.138294] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 1203.143503] genl_family_rcv_msg+0x642/0xc40 [ 1203.147925] ? genl_rcv+0x40/0x40 [ 1203.151386] ? genl_rcv_msg+0x12f/0x160 [ 1203.155368] ? mutex_trylock+0x1a0/0x1a0 [ 1203.159449] ? __radix_tree_lookup+0x216/0x370 [ 1203.164050] genl_rcv_msg+0xbf/0x160 [ 1203.167773] netlink_rcv_skb+0x160/0x440 [ 1203.171849] ? genl_family_rcv_msg+0xc40/0xc40 [ 1203.176445] ? netlink_ack+0xae0/0xae0 [ 1203.180342] ? genl_rcv+0x15/0x40 [ 1203.183813] genl_rcv+0x24/0x40 [ 1203.187111] netlink_unicast+0x4d5/0x690 [ 1203.191184] ? netlink_sendskb+0x110/0x110 [ 1203.195423] ? _copy_from_iter_full+0x229/0x7c0 [ 1203.200097] ? __phys_addr_symbol+0x2c/0x70 [ 1203.204432] ? __check_object_size+0x17b/0x3e0 [ 1203.209024] netlink_sendmsg+0x6c3/0xc50 [ 1203.213098] ? aa_af_perm+0x230/0x230 [ 1203.216931] ? nlmsg_notify+0x1f0/0x1f0 [ 1203.220909] ? kernel_recvmsg+0x220/0x220 [ 1203.225072] ? nlmsg_notify+0x1f0/0x1f0 [ 1203.229057] sock_sendmsg+0xc3/0x120 [ 1203.232778] ___sys_sendmsg+0x7bb/0x8e0 [ 1203.236855] ? check_preemption_disabled+0x41/0x280 [ 1203.241877] ? copy_msghdr_from_user+0x440/0x440 [ 1203.246645] ? __fget+0x32f/0x510 [ 1203.250116] ? lock_downgrade+0x720/0x720 [ 1203.254274] ? check_preemption_disabled+0x41/0x280 [ 1203.259302] ? check_preemption_disabled+0x41/0x280 [ 1203.264335] ? __fget+0x356/0x510 [ 1203.267800] ? do_dup2+0x450/0x450 [ 1203.271365] ? lock_downgrade+0x720/0x720 [ 1203.275521] ? vfs_write+0x3d7/0x540 [ 1203.279243] ? __fdget+0x1d0/0x230 [ 1203.282794] __x64_sys_sendmsg+0x132/0x220 [ 1203.287166] ? __sys_sendmsg+0x1b0/0x1b0 [ 1203.291239] ? vfs_write+0x393/0x540 [ 1203.295151] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1203.300614] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1203.305643] ? do_syscall_64+0x21/0x620 [ 1203.309634] do_syscall_64+0xf9/0x620 [ 1203.313534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.319082] RIP: 0033:0x7ff51d9bf0d9 [ 1203.322799] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1203.341812] RSP: 002b:00007ff51bf31168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.350936] RAX: ffffffffffffffda RBX: 00007ff51dadef80 RCX: 00007ff51d9bf0d9 [ 1203.358227] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 1203.365511] RBP: 00007ff51bf311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.372794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.380081] R13: 00007ffdc9b897bf R14: 00007ff51bf31300 R15: 0000000000022000 20:10:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x40) (async) r5 = accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async, rerun: 64) close(r3) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (rerun: 64) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x5) (async, rerun: 32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b69873e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r7, @ANYRESOCT], 0x3f, 0x0) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x3) (rerun: 32) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39cdc9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c77acbdda22a93172408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca462e90749f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b738a9c32427defa60238bf4af9c674591886ac0d81c86b54c22e1c0e244b732feb9f22aa113440c10a88f330f3be86f589703b2b56ed43c17c349c6cf3e84cf80863066a3e534d0b7fea707f2c44ef571ce5110ceb87bf78b730208", @ANYRESDEC=r8, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000280)) (async) sendfile(r1, r5, &(0x7f0000000340)=0x7, 0x6) 20:10:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xff, 0xd8, 0xfa, 0x9d, 0x0, 0x4, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x3ff}, 0x0, 0x6, 0x7, 0x6, 0x9, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x4, r1, 0x3) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x3, 0x7e, 0x1f, 0x0, 0x100000001, 0x12201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x17fd, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x15430, 0xffffffffffffffff, 0x40, 0x8, 0x9, 0x7, 0x8000, 0x0, 0x8, 0x0, 0xffffffffffffffb6}, 0xffffffffffffffff, 0xd, r0, 0x9) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 20:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4005, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1203.435386] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) (fail_nth: 5) 20:10:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 32) close(r3) (async, rerun: 32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x7fd, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4008, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xff, 0xd8, 0xfa, 0x9d, 0x0, 0x4, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x3ff}, 0x0, 0x6, 0x7, 0x6, 0x9, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x4, r1, 0x3) close(r1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x3, 0x7e, 0x1f, 0x0, 0x100000001, 0x12201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x17fd, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x15430, 0xffffffffffffffff, 0x40, 0x8, 0x9, 0x7, 0x8000, 0x0, 0x8, 0x0, 0xffffffffffffffb6}, 0xffffffffffffffff, 0xd, r0, 0x9) (async) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 20:10:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x40) r5 = accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x5) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b69873e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r7, @ANYRESOCT], 0x3f, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39cdc9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c77acbdda22a93172408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca462e90749f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b738a9c32427defa60238bf4af9c674591886ac0d81c86b54c22e1c0e244b732feb9f22aa113440c10a88f330f3be86f589703b2b56ed43c17c349c6cf3e84cf80863066a3e534d0b7fea707f2c44ef571ce5110ceb87bf78b730208", @ANYRESDEC=r8, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f0000000280)) sendfile(r1, r5, &(0x7f0000000340)=0x7, 0x6) 20:10:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xff, 0xd8, 0xfa, 0x9d, 0x0, 0x4, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x3ff}, 0x0, 0x6, 0x7, 0x6, 0x9, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x4, r1, 0x3) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x3, 0x7e, 0x1f, 0x0, 0x100000001, 0x12201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x17fd, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x15430, 0xffffffffffffffff, 0x40, 0x8, 0x9, 0x7, 0x8000, 0x0, 0x8, 0x0, 0xffffffffffffffb6}, 0xffffffffffffffff, 0xd, r0, 0x9) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000080)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xff, 0xd8, 0xfa, 0x9d, 0x0, 0x4, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x3ff}, 0x0, 0x6, 0x7, 0x6, 0x9, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x4, r1, 0x3) (async) close(r1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x3, 0x7e, 0x1f, 0x0, 0x100000001, 0x12201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x17fd, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x15430, 0xffffffffffffffff, 0x40, 0x8, 0x9, 0x7, 0x8000, 0x0, 0x8, 0x0, 0xffffffffffffffb6}, 0xffffffffffffffff, 0xd, r0, 0x9) (async) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) (async) 20:10:53 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x7fd, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400f, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000340)="17476755492c2252b63959323f0b7cabc9e4fbb87fc7ea0e08bbf8aa8fd9910808f3cbfeaa3c7632aeabaa49833994777c29bc5727eecb98d0eb9039827122d14f5dc508a5c0e64f57fa28b42099217b34ae8b4fb9b244189e8344eefe4fd4e9be77dabfea36442f485ddb86d8e6e136c30116e08b4a3c72e33da10e5b1c9d930a0027f643e5f201c0c8bff8cc3f3b04240b8e5ad37c7d23b0266330ccacadfdb51b824f61f0cb119d319fdb054bb0bbca432ae3cf58b554") ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64, @ANYRESOCT], 0x3f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r5, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4060, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400f, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1204.022484] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0x6, 0x4) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x87c) sendfile(r0, r5, &(0x7f0000000100)=0x9, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4002, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4008, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000340)="17476755492c2252b63959323f0b7cabc9e4fbb87fc7ea0e08bbf8aa8fd9910808f3cbfeaa3c7632aeabaa49833994777c29bc5727eecb98d0eb9039827122d14f5dc508a5c0e64f57fa28b42099217b34ae8b4fb9b244189e8344eefe4fd4e9be77dabfea36442f485ddb86d8e6e136c30116e08b4a3c72e33da10e5b1c9d930a0027f643e5f201c0c8bff8cc3f3b04240b8e5ad37c7d23b0266330ccacadfdb51b824f61f0cb119d319fdb054bb0bbca432ae3cf58b554") ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (rerun: 64) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64, @ANYRESOCT], 0x3f, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r5, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) (rerun: 32) 20:10:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x20000340, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4200, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4003, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1204.234527] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000340)="17476755492c2252b63959323f0b7cabc9e4fbb87fc7ea0e08bbf8aa8fd9910808f3cbfeaa3c7632aeabaa49833994777c29bc5727eecb98d0eb9039827122d14f5dc508a5c0e64f57fa28b42099217b34ae8b4fb9b244189e8344eefe4fd4e9be77dabfea36442f485ddb86d8e6e136c30116e08b4a3c72e33da10e5b1c9d930a0027f643e5f201c0c8bff8cc3f3b04240b8e5ad37c7d23b0266330ccacadfdb51b824f61f0cb119d319fdb054bb0bbca432ae3cf58b554") (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f23", @ANYRES64, @ANYRESOCT], 0x3f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r5, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) sendmsg$AUDIT_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x11, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240408d0}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3b5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946fb8cc09164c8921c08290b66c73e68e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r4], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000100)={0x8, {0x10, 0x5, 0x2, 0x8, 0x1}}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf250700000100080311fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0x6, 0x4) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x87c) sendfile(r0, r5, &(0x7f0000000100)=0x9, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4060, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4004, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) (async) sendmsg$AUDIT_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x11, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240408d0}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async, rerun: 32) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3b5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946fb8cc09164c8921c08290b66c73e68e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r4], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000100)={0x8, {0x10, 0x5, 0x2, 0x8, 0x1}}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf250700000100080311fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4005, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1204.794499] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4060, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4008, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 32) socket(0x10, 0x0, 0x2) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0x6, 0x4) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x87c) sendfile(r0, r5, &(0x7f0000000100)=0x9, 0x0) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async, rerun: 64) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 32) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async, rerun: 64) close(r2) (rerun: 64) sendmsg$AUDIT_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x11, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x240408d0}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3b5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946fb8cc09164c8921c08290b66c73e68e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r5, @ANYRES8=r4], 0x3f, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000100)={0x8, {0x10, 0x5, 0x2, 0x8, 0x1}}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf250700000100080311fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) (rerun: 64) 20:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4004, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x42, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400f, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x398, 0x190, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0xff, 0x7, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0x7fffff80, 0xffffff00], [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff, 0x101ffff00], 0x2060, 0xa01}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xffffffc1, 0xb3, 0x1}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x8, 0x3], 0x2, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @loopback, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @mcast2, @mcast2, @private1, @local, @mcast2, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x7, 0x3}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x87, 0x6, 0x5, 0x40}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x1}, {0x3, 0x4, 0x5}, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df54"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x400e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x6, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1205.418297] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x2, 0x4, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3bdcccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4060, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4008, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async, rerun: 32) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x3) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x398, 0x190, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0xff, 0x7, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0x7fffff80, 0xffffff00], [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff, 0x101ffff00], 0x2060, 0xa01}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xffffffc1, 0xb3, 0x1}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x8, 0x3], 0x2, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @loopback, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @mcast2, @mcast2, @private1, @local, @mcast2, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x7, 0x3}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x87, 0x6, 0x5, 0x40}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x1}, {0x3, 0x4, 0x5}, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4008, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x20000340, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x2, 0x4, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3bdcccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xf, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1205.898439] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4004, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x2, 0x4, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3bdcccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (rerun: 32) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 64) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 64) socket(0x10, 0x0, 0x2) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x398, 0x190, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0xff, 0x7, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0x7fffff80, 0xffffff00], [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff, 0x101ffff00], 0x2060, 0xa01}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xffffffc1, 0xb3, 0x1}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x8, 0x3], 0x2, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @loopback, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @mcast2, @mcast2, @private1, @local, @mcast2, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x7, 0x3}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x87, 0x6, 0x5, 0x40}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x1}, {0x3, 0x4, 0x5}, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) (fail_nth: 1) 20:10:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1206.195622] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xa, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="0f0000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) r7 = accept(r4, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x80) bind$bt_hci(r7, &(0x7f0000000280), 0x6) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="59495bffa3a02d81fec3edf8e947f1e42f3d363c53338d8a4274a0191a60fd0aa455ca8406d1d3794d147a38fb9562ea", 0x30}], 0x1, 0x6) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df54"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="100000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xec0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 32) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async, rerun: 64) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (rerun: 64) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async, rerun: 64) close(r2) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f23", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{0x0}], 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="1b0000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1206.566033] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x800) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYRES8=0x0, @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x28, 0xfc, 0x3, 0xfe, 0x8, 0xc00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x41) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x6, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r4 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r3) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 32) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) r7 = accept(r4, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x80) bind$bt_hci(r7, &(0x7f0000000280), 0x6) (async, rerun: 32) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="59495bffa3a02d81fec3edf8e947f1e42f3d363c53338d8a4274a0191a60fd0aa455ca8406d1d3794d147a38fb9562ea", 0x30}], 0x1, 0x6) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c0000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x20000340, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x800) (async) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYRES8=0x0, @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x28, 0xfc, 0x3, 0xfe, 0x8, 0xc00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x41) (async) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x64, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1206.956752] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="c00000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x7ffff000, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x800) (rerun: 64) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYRES8=0x0, @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x8, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x28, 0xfc, 0x3, 0xfe, 0x8, 0xc00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x41) (async) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r3) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) (async) r7 = accept(r4, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x80) bind$bt_hci(r7, &(0x7f0000000280), 0x6) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="59495bffa3a02d81fec3edf8e947f1e42f3d363c53338d8a4274a0191a60fd0aa455ca8406d1d3794d147a38fb9562ea", 0x30}], 0x1, 0x6) (async) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0xfffffdef, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="c00e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) [ 1207.232431] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xa, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df54"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="effd00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="e03f03002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1207.570514] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:56 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000202000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 64) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x2) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5b0096ae8dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad0171552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c630d19337a63b4fb7fd16a2ac98b9880cc04eae8219faed9d5aa7108d7baa8542db92e4722abfb3ce63b006949f5fc3b17722f24abd3c81f93a666f20", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:57 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="00f0ff7f2000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x6, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x7, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="effdffff2000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1207.959592] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x2) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) (async, rerun: 32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x64, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000000f00190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 64) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async, rerun: 64) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 32) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xa, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1208.916546] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1208.964782] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000340)="e51d4c5c44c973255990abba746bbb9623bbd617eb300f0eb4e5d411dfd6abab0800e5a13e89aab1f5dfb863699f935740f0fe72928e582ac82478387c2c0bc227e7d801215145045377cc02f6af426f52269ee1a5c844a2e375017522540b218ce68ada282d987520b91be29cad8bc60630ba6a3c313a967f2888eb6aceeb3eb623e0e6764a03edddcd392236210b54cfdcb9be2feaaf44d17876c83f24973a7d9d29e6a53b7d13a3f2d48b9286c57450bb1908f8b3d0f6987f2533dffd0f2e73626ee4b6377e22a7d4755fce0dd573bb63727fe301bdcac9955e3e84558b70a764bdffa3840c197c5091ed866aa41ac3628728", 0xf4, 0xc04a016, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x2c, 0x6, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x8000, 0x0, @mcast2, 0x6}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25010000000000000008410000004c00180001000069620000000000000000004004ec79a329c3ff520a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f0d0e0c505b625273a6968437a14793735baccb2c54"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) sendmsg$nl_route(r7, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1209.008394] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.041555] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1209.071268] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.100495] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.135369] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.160058] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.185045] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.214504] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.235997] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.262789] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.284720] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.324961] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.354544] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.364981] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.378785] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.394605] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.402287] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.408870] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.415826] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.423226] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.429404] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.441889] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.448025] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.454544] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.461204] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.467855] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r2, 0x0, 0x0, 0x4004000) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/631], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000340)="e51d4c5c44c973255990abba746bbb9623bbd617eb300f0eb4e5d411dfd6abab0800e5a13e89aab1f5dfb863699f935740f0fe72928e582ac82478387c2c0bc227e7d801215145045377cc02f6af426f52269ee1a5c844a2e375017522540b218ce68ada282d987520b91be29cad8bc60630ba6a3c313a967f2888eb6aceeb3eb623e0e6764a03edddcd392236210b54cfdcb9be2feaaf44d17876c83f24973a7d9d29e6a53b7d13a3f2d48b9286c57450bb1908f8b3d0f6987f2533dffd0f2e73626ee4b6377e22a7d4755fce0dd573bb63727fe301bdcac9955e3e84558b70a764bdffa3840c197c5091ed866aa41ac3628728", 0xf4, 0xc04a016, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x2c, 0x6, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x8000, 0x0, @mcast2, 0x6}, 0x1c) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25010000000000000008410000004c00180001000069620000000000000000004004ec79a329c3ff520a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f0d0e0c505b625273a6968437a14793735baccb2c54"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f23", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) [ 1209.474661] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.481490] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.487815] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.494727] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1209.501316] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x0, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000340)="e51d4c5c44c973255990abba746bbb9623bbd617eb300f0eb4e5d411dfd6abab0800e5a13e89aab1f5dfb863699f935740f0fe72928e582ac82478387c2c0bc227e7d801215145045377cc02f6af426f52269ee1a5c844a2e375017522540b218ce68ada282d987520b91be29cad8bc60630ba6a3c313a967f2888eb6aceeb3eb623e0e6764a03edddcd392236210b54cfdcb9be2feaaf44d17876c83f24973a7d9d29e6a53b7d13a3f2d48b9286c57450bb1908f8b3d0f6987f2533dffd0f2e73626ee4b6377e22a7d4755fce0dd573bb63727fe301bdcac9955e3e84558b70a764bdffa3840c197c5091ed866aa41ac3628728", 0xf4, 0xc04a016, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x2c, 0x6, 0x3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) (async) close(r2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x8000, 0x0, @mcast2, 0x6}, 0x1c) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25010000000000000008410000004c00180001000069620000000000000000004004ec79a329c3ff520a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f0d0e0c505b625273a6968437a14793735baccb2c54"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{0x0}], 0x1) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00000000000000", @ANYRESDEC=r6, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbb", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000280)) 20:10:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1209.661518] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) (rerun: 32) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r2, 0x0, 0x0, 0x4004000) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe7d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df5400"/631], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:58 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1209.826815] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 32) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) (async, rerun: 32) socket(0x10, 0x0, 0x2) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r2, 0x0, 0x0, 0x4004000) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/631], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r8, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (rerun: 32) 20:10:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x64, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x3, 0x9}, 0x100, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0xb, 0x5, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x40, 0x6, 0x3f, 0x0, 0x7fffffff, 0x20, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x5, 0x6}, 0x1c00, 0x7fffffff, 0x9, 0x0, 0x10001, 0x7, 0x9, 0x0, 0x9849, 0x0, 0xee6}, 0x0, 0x1, r1, 0x8) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x12dd, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1210.251293] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0xb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x3, 0x9}, 0x100, './file0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0xb, 0x5, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x40, 0x6, 0x3f, 0x0, 0x7fffffff, 0x20, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x5, 0x6}, 0x1c00, 0x7fffffff, 0x9, 0x0, 0x10001, 0x7, 0x9, 0x0, 0x9849, 0x0, 0xee6}, 0x0, 0x1, r1, 0x8) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xdd12, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290f00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:10:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1210.733158] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:10:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x3, 0x9}, 0x100, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0xb, 0x5, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r3) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) (async, rerun: 64) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r3, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x40, 0x6, 0x3f, 0x0, 0x7fffffff, 0x20, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x5, 0x6}, 0x1c00, 0x7fffffff, 0x9, 0x0, 0x10001, 0x7, 0x9, 0x0, 0x9849, 0x0, 0xee6}, 0x0, 0x1, r1, 0x8) (async) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1210.840029] FAULT_INJECTION: forcing a failure. [ 1210.840029] name failslab, interval 1, probability 0, space 0, times 0 20:11:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1210.913448] CPU: 1 PID: 2105 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1210.921290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1210.930656] Call Trace: [ 1210.933383] dump_stack+0x1fc/0x2ef [ 1210.937046] should_fail.cold+0xa/0xf [ 1210.940880] ? setup_fault_attr+0x200/0x200 [ 1210.945226] ? lock_acquire+0x1ec/0x3c0 [ 1210.949327] __should_failslab+0x115/0x180 [ 1210.953583] should_failslab+0x5/0x10 [ 1210.957399] kmem_cache_alloc_node+0x245/0x3b0 [ 1210.962043] __alloc_skb+0x71/0x560 [ 1210.966485] sock_wmalloc+0xd0/0x120 [ 1210.970227] pppol2tp_sendmsg+0x234/0x660 [ 1210.974395] ? security_socket_sendmsg+0x83/0xb0 [ 1210.979169] ? pppol2tp_recvmsg+0x270/0x270 [ 1210.983604] sock_sendmsg+0xc3/0x120 [ 1210.987349] sock_no_sendpage+0xf5/0x140 [ 1210.991515] ? __sk_mem_schedule+0xd0/0xd0 [ 1210.995764] ? rcu_nmi_exit+0xb3/0x180 [ 1210.999671] ? sock_sendpage+0x1e/0x140 [ 1211.003662] sock_sendpage+0x10d/0x140 [ 1211.007567] pipe_to_sendpage+0x268/0x330 [ 1211.011722] ? sockfs_setattr+0x160/0x160 [ 1211.015881] ? direct_splice_actor+0x160/0x160 [ 1211.020473] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1211.025857] __splice_from_pipe+0x389/0x800 [ 1211.030174] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1211.030315] ? direct_splice_actor+0x160/0x160 [ 1211.040956] generic_splice_sendpage+0xd4/0x140 [ 1211.045645] ? __splice_from_pipe+0x800/0x800 [ 1211.050183] ? security_file_permission+0x1c0/0x220 [ 1211.055404] ? __splice_from_pipe+0x800/0x800 [ 1211.059914] __se_sys_splice+0xfe7/0x16d0 [ 1211.064086] ? ksys_write+0x1c8/0x2a0 [ 1211.067899] ? __se_sys_tee+0xb90/0xb90 [ 1211.071895] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1211.076931] ? do_syscall_64+0x21/0x620 [ 1211.080925] do_syscall_64+0xf9/0x620 [ 1211.084754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.089956] RIP: 0033:0x7ff9a60830d9 [ 1211.093703] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1211.112923] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1211.120753] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1211.128030] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1211.135308] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1211.142590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.149882] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 2) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:00 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1211.436008] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1211.469859] FAULT_INJECTION: forcing a failure. [ 1211.469859] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.510076] CPU: 0 PID: 2159 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1211.518260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1211.527622] Call Trace: [ 1211.530224] dump_stack+0x1fc/0x2ef [ 1211.533864] should_fail.cold+0xa/0xf [ 1211.537681] ? setup_fault_attr+0x200/0x200 [ 1211.542023] ? lock_acquire+0x170/0x3c0 [ 1211.546044] __should_failslab+0x115/0x180 [ 1211.550380] should_failslab+0x5/0x10 [ 1211.554187] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1211.559310] __kmalloc_node_track_caller+0x38/0x70 [ 1211.564255] __alloc_skb+0xae/0x560 [ 1211.567899] sock_wmalloc+0xd0/0x120 [ 1211.571631] pppol2tp_sendmsg+0x234/0x660 [ 1211.575802] ? security_socket_sendmsg+0x83/0xb0 [ 1211.580656] ? pppol2tp_recvmsg+0x270/0x270 [ 1211.585077] sock_sendmsg+0xc3/0x120 [ 1211.588799] sock_no_sendpage+0xf5/0x140 [ 1211.592863] ? __sk_mem_schedule+0xd0/0xd0 [ 1211.597120] sock_sendpage+0x10d/0x140 [ 1211.601112] pipe_to_sendpage+0x268/0x330 [ 1211.605371] ? sockfs_setattr+0x160/0x160 [ 1211.609545] ? direct_splice_actor+0x160/0x160 [ 1211.614225] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1211.619605] __splice_from_pipe+0x389/0x800 [ 1211.623940] ? direct_splice_actor+0x160/0x160 [ 1211.628541] generic_splice_sendpage+0xd4/0x140 [ 1211.633220] ? __splice_from_pipe+0x800/0x800 [ 1211.637735] ? security_file_permission+0x1c0/0x220 [ 1211.642770] ? __splice_from_pipe+0x800/0x800 [ 1211.647452] __se_sys_splice+0xfe7/0x16d0 [ 1211.651618] ? ksys_write+0x1c8/0x2a0 [ 1211.655474] ? __se_sys_tee+0xb90/0xb90 [ 1211.659477] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1211.664503] ? do_syscall_64+0x21/0x620 [ 1211.668487] do_syscall_64+0xf9/0x620 [ 1211.672299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.677503] RIP: 0033:0x7ff9a60830d9 [ 1211.681222] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1211.700230] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 20:11:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (rerun: 32) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (rerun: 64) 20:11:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1211.707957] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1211.715236] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1211.722515] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1211.729798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.737168] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 [ 1211.811064] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1211.837588] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 3) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1212.184654] FAULT_INJECTION: forcing a failure. [ 1212.184654] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.196032] CPU: 0 PID: 2200 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1212.203926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1212.213287] Call Trace: [ 1212.215888] dump_stack+0x1fc/0x2ef [ 1212.219625] should_fail.cold+0xa/0xf [ 1212.223446] ? setup_fault_attr+0x200/0x200 [ 1212.227878] ? __should_failslab+0xe/0x180 [ 1212.233436] __should_failslab+0x115/0x180 [ 1212.237782] should_failslab+0x5/0x10 [ 1212.241618] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1212.246654] __kmalloc_node_track_caller+0x38/0x70 [ 1212.251690] pskb_expand_head+0x159/0xf20 [ 1212.255865] ? iov_iter_advance+0x210/0xdb0 [ 1212.260206] l2tp_xmit_skb+0xb6c/0x1590 [ 1212.264199] ? __phys_addr_symbol+0x2c/0x70 [ 1212.268629] pppol2tp_sendmsg+0x473/0x660 [ 1212.272797] ? security_socket_sendmsg+0x83/0xb0 [ 1212.277656] ? pppol2tp_recvmsg+0x270/0x270 [ 1212.282005] sock_sendmsg+0xc3/0x120 [ 1212.285733] sock_no_sendpage+0xf5/0x140 [ 1212.289818] ? __sk_mem_schedule+0xd0/0xd0 [ 1212.294079] ? retint_kernel+0x2d/0x2d [ 1212.297986] sock_sendpage+0x10d/0x140 [ 1212.301902] pipe_to_sendpage+0x268/0x330 [ 1212.306075] ? sockfs_setattr+0x160/0x160 [ 1212.310348] ? direct_splice_actor+0x160/0x160 [ 1212.314952] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1212.320341] __splice_from_pipe+0x389/0x800 [ 1212.324686] ? direct_splice_actor+0x160/0x160 [ 1212.329286] generic_splice_sendpage+0xd4/0x140 [ 1212.333973] ? __splice_from_pipe+0x800/0x800 [ 1212.338486] ? security_file_permission+0x6e/0x220 [ 1212.343438] ? security_file_permission+0x1c0/0x220 [ 1212.348473] ? __splice_from_pipe+0x800/0x800 [ 1212.352986] __se_sys_splice+0xfe7/0x16d0 [ 1212.357161] ? ksys_write+0x1c8/0x2a0 [ 1212.360977] ? __se_sys_tee+0xb90/0xb90 [ 1212.364969] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1212.370007] ? do_syscall_64+0x21/0x620 [ 1212.373999] do_syscall_64+0xf9/0x620 [ 1212.378008] entry_SYSCALL_64_after_hwframe+0x49/0xbe 20:11:01 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 32) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x1927, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1212.383404] RIP: 0033:0x7ff9a60830d9 [ 1212.387128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1212.398710] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1212.406618] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1212.406633] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1212.406648] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1212.406657] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1212.406669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.406676] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 4) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2719, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f0000000340)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB="5ec7051238ad588e3ae88ca57e5243b91c903de06301d683338773cebb7e0541f697fbce6a5459257ece86145985ac4c12", @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:01 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:02 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1212.775410] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1212.832261] FAULT_INJECTION: forcing a failure. [ 1212.832261] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.843641] CPU: 1 PID: 2251 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1212.851539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1212.860995] Call Trace: [ 1212.863696] dump_stack+0x1fc/0x2ef [ 1212.867344] should_fail.cold+0xa/0xf [ 1212.871192] ? setup_fault_attr+0x200/0x200 [ 1212.875635] ? lockdep_hardirqs_on+0x288/0x5c0 20:11:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1212.880327] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1212.885097] __should_failslab+0x115/0x180 [ 1212.889347] should_failslab+0x5/0x10 [ 1212.893183] kmem_cache_alloc+0x3f/0x370 [ 1212.897286] skb_clone+0x151/0x3d0 [ 1212.900859] skb_realloc_headroom+0x82/0x110 [ 1212.905455] ip6_xmit+0x173e/0x20a0 [ 1212.909108] ? ip6_append_data+0x330/0x330 [ 1212.913362] ? ip6_dst_check+0x323/0x710 [ 1212.917442] ? __sk_dst_check+0x139/0x2d0 [ 1212.921624] ? check_preemption_disabled+0x41/0x280 [ 1212.926667] inet6_csk_xmit+0x2fb/0x5c0 20:11:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 64) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 32) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async, rerun: 32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f0000000340)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB="5ec7051238ad588e3ae88ca57e5243b91c903de06301d683338773cebb7e0541f697fbce6a5459257ece86145985ac4c12", @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 32) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async, rerun: 32) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 1212.930772] ? inet6_csk_update_pmtu+0x180/0x180 [ 1212.935559] ? udp6_set_csum+0x299/0x590 [ 1212.939745] l2tp_xmit_skb+0xec6/0x1590 [ 1212.943758] pppol2tp_sendmsg+0x473/0x660 [ 1212.947943] ? security_socket_sendmsg+0x83/0xb0 [ 1212.952715] ? pppol2tp_recvmsg+0x270/0x270 [ 1212.957273] sock_sendmsg+0xc3/0x120 [ 1212.961005] sock_no_sendpage+0xf5/0x140 [ 1212.965082] ? __sk_mem_schedule+0xd0/0xd0 [ 1212.969431] ? sock_no_sendpage+0x20/0x140 [ 1212.973687] sock_sendpage+0x10d/0x140 [ 1212.977599] pipe_to_sendpage+0x268/0x330 [ 1212.981759] ? sockfs_setattr+0x160/0x160 [ 1212.985933] ? direct_splice_actor+0x160/0x160 [ 1212.990529] ? splice_from_pipe_next.part.0+0x23/0x360 [ 1212.995826] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1213.001208] __splice_from_pipe+0x389/0x800 [ 1213.005554] ? direct_splice_actor+0x160/0x160 [ 1213.010159] generic_splice_sendpage+0xd4/0x140 [ 1213.014845] ? __splice_from_pipe+0x800/0x800 [ 1213.019355] ? security_file_permission+0xda/0x220 [ 1213.024319] ? security_file_permission+0x1c0/0x220 [ 1213.029400] ? __splice_from_pipe+0x800/0x800 [ 1213.033996] __se_sys_splice+0xfe7/0x16d0 [ 1213.038175] ? ksys_write+0x1c8/0x2a0 [ 1213.041995] ? __se_sys_tee+0xb90/0xb90 [ 1213.046089] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1213.051129] ? do_syscall_64+0x21/0x620 [ 1213.055226] do_syscall_64+0xf9/0x620 [ 1213.059168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.064547] RIP: 0033:0x7ff9a60830d9 [ 1213.068284] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1213.087293] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1213.095018] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1213.102430] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1213.109801] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1213.117256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.124534] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 5) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:02 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f0000000340)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB="5ec7051238ad588e3ae88ca57e5243b91c903de06301d683338773cebb7e0541f697fbce6a5459257ece86145985ac4c12", @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:02 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1213.459974] FAULT_INJECTION: forcing a failure. [ 1213.459974] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.471403] CPU: 1 PID: 2293 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1213.479729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1213.489095] Call Trace: [ 1213.491714] dump_stack+0x1fc/0x2ef [ 1213.495364] should_fail.cold+0xa/0xf [ 1213.499185] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1213.503955] ? setup_fault_attr+0x200/0x200 20:11:02 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1213.508297] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1213.512890] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1213.517668] __should_failslab+0x115/0x180 [ 1213.522184] should_failslab+0x5/0x10 [ 1213.525999] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1213.531115] __kmalloc_node_track_caller+0x38/0x70 [ 1213.536058] pskb_expand_head+0x159/0xf20 [ 1213.538397] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1213.540222] ? skb_clone+0x1b2/0x3d0 [ 1213.540240] skb_realloc_headroom+0xa4/0x110 [ 1213.540252] ip6_xmit+0x173e/0x20a0 20:11:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1213.540272] ? ip6_append_data+0x330/0x330 [ 1213.540288] ? rcu_nmi_exit+0xb3/0x180 [ 1213.540305] ? retint_kernel+0x2d/0x2d [ 1213.540329] ? check_preemption_disabled+0x41/0x280 [ 1213.540345] ? check_preemption_disabled+0x41/0x280 [ 1213.580448] inet6_csk_xmit+0x2fb/0x5c0 [ 1213.584445] ? inet6_csk_update_pmtu+0x180/0x180 [ 1213.589320] ? udp6_set_csum+0x299/0x590 [ 1213.593492] l2tp_xmit_skb+0xec6/0x1590 [ 1213.597505] pppol2tp_sendmsg+0x473/0x660 [ 1213.602717] ? security_socket_sendmsg+0x83/0xb0 20:11:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x1996, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1213.607492] ? pppol2tp_recvmsg+0x270/0x270 [ 1213.611924] sock_sendmsg+0xc3/0x120 [ 1213.615743] sock_no_sendpage+0xf5/0x140 [ 1213.619822] ? __sk_mem_schedule+0xd0/0xd0 [ 1213.624090] ? retint_kernel+0x2d/0x2d [ 1213.628002] sock_sendpage+0x10d/0x140 [ 1213.631914] pipe_to_sendpage+0x268/0x330 [ 1213.636079] ? sockfs_setattr+0x160/0x160 [ 1213.640247] ? direct_splice_actor+0x160/0x160 [ 1213.644853] ? __splice_from_pipe+0x24b/0x800 [ 1213.649364] __splice_from_pipe+0x389/0x800 [ 1213.653710] ? direct_splice_actor+0x160/0x160 [ 1213.658340] generic_splice_sendpage+0xd4/0x140 [ 1213.663035] ? __splice_from_pipe+0x800/0x800 [ 1213.667562] ? __splice_from_pipe+0x800/0x800 [ 1213.672944] __se_sys_splice+0xfe7/0x16d0 [ 1213.677120] ? ksys_write+0x1c8/0x2a0 [ 1213.680941] ? __se_sys_tee+0xb90/0xb90 [ 1213.685000] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1213.690035] ? do_syscall_64+0x21/0x620 [ 1213.694033] do_syscall_64+0xf9/0x620 [ 1213.697857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.703488] RIP: 0033:0x7ff9a60830d9 [ 1213.707213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1213.726305] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1213.734035] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1213.741332] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1213.748734] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1213.756217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.763600] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 6) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:03 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1214.026829] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1214.169241] FAULT_INJECTION: forcing a failure. [ 1214.169241] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.180732] CPU: 0 PID: 2337 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1214.188550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1214.197998] Call Trace: [ 1214.200604] dump_stack+0x1fc/0x2ef [ 1214.204291] should_fail.cold+0xa/0xf [ 1214.208111] ? setup_fault_attr+0x200/0x200 [ 1214.212631] ? skb_checksum+0x90/0xc0 [ 1214.216449] __should_failslab+0x115/0x180 [ 1214.220698] should_failslab+0x5/0x10 [ 1214.224529] kmem_cache_alloc_node+0x54/0x3b0 [ 1214.229055] __alloc_skb+0x71/0x560 [ 1214.232714] ip6_fragment+0x1583/0x34e0 [ 1214.236720] ? ip6_forward_finish+0x4b0/0x4b0 [ 1214.241774] ? check_preemption_disabled+0x41/0x280 [ 1214.246817] ? ip6_forward+0x3750/0x3750 [ 1214.250919] ip6_finish_output+0x9da/0x10f0 [ 1214.255267] ip6_output+0x205/0x770 [ 1214.258916] ? ip6_finish_output+0x10f0/0x10f0 [ 1214.263516] ? retint_kernel+0x2d/0x2d 20:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:03 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1214.267425] ? ip6_fragment+0x34e0/0x34e0 [ 1214.271602] ip6_xmit+0xdbf/0x20a0 [ 1214.275191] ? ip6_append_data+0x330/0x330 [ 1214.279532] ? ip6_dst_check+0x323/0x710 [ 1214.283617] ? ac6_proc_exit+0x50/0x50 [ 1214.287534] ? check_preemption_disabled+0x41/0x280 [ 1214.292748] inet6_csk_xmit+0x2fb/0x5c0 [ 1214.296746] ? inet6_csk_update_pmtu+0x180/0x180 [ 1214.301618] ? udp6_set_csum+0x299/0x590 [ 1214.305799] l2tp_xmit_skb+0xec6/0x1590 [ 1214.309808] pppol2tp_sendmsg+0x473/0x660 [ 1214.314073] ? security_socket_sendmsg+0x83/0xb0 20:11:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1214.318939] ? pppol2tp_recvmsg+0x270/0x270 [ 1214.324242] sock_sendmsg+0xc3/0x120 [ 1214.328083] sock_no_sendpage+0xf5/0x140 [ 1214.332364] ? __sk_mem_schedule+0xd0/0xd0 [ 1214.336651] sock_sendpage+0x10d/0x140 [ 1214.340670] pipe_to_sendpage+0x268/0x330 [ 1214.344837] ? sockfs_setattr+0x160/0x160 [ 1214.349185] ? direct_splice_actor+0x160/0x160 [ 1214.354007] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1214.359915] __splice_from_pipe+0x389/0x800 [ 1214.364283] ? direct_splice_actor+0x160/0x160 20:11:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x9619, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1214.369069] generic_splice_sendpage+0xd4/0x140 [ 1214.373767] ? __splice_from_pipe+0x800/0x800 [ 1214.378469] ? security_file_permission+0x1c0/0x220 [ 1214.383691] ? __splice_from_pipe+0x800/0x800 [ 1214.388549] __se_sys_splice+0xfe7/0x16d0 [ 1214.392774] ? rcu_nmi_exit+0xb3/0x180 [ 1214.396903] ? retint_kernel+0x2d/0x2d [ 1214.401307] ? __se_sys_tee+0xb90/0xb90 [ 1214.405393] ? do_syscall_64+0xbf/0x620 [ 1214.409505] do_syscall_64+0xf9/0x620 [ 1214.413456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.418661] RIP: 0033:0x7ff9a60830d9 [ 1214.422413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1214.441674] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1214.449394] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1214.457253] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 20:11:03 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="291e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1214.464708] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1214.472257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.480763] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 7) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xdd120000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async, rerun: 32) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:03 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:03 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x2) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r6, 0x7fff) io_submit(r7, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x200a00}]) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:04 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1214.981635] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1215.036794] FAULT_INJECTION: forcing a failure. [ 1215.036794] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.048516] CPU: 1 PID: 2407 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1215.056586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1215.065957] Call Trace: [ 1215.068558] dump_stack+0x1fc/0x2ef [ 1215.072208] should_fail.cold+0xa/0xf [ 1215.076027] ? setup_fault_attr+0x200/0x200 [ 1215.080364] ? retint_kernel+0x2d/0x2d [ 1215.084267] __should_failslab+0x115/0x180 [ 1215.088528] should_failslab+0x5/0x10 [ 1215.092342] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1215.097377] __kmalloc_node_track_caller+0x38/0x70 [ 1215.102321] __alloc_skb+0xae/0x560 [ 1215.105985] ip6_fragment+0x1583/0x34e0 [ 1215.110767] ? ip6_forward_finish+0x4b0/0x4b0 [ 1215.115323] ? ip6_forward+0x3750/0x3750 [ 1215.119406] ip6_finish_output+0x9da/0x10f0 [ 1215.123841] ip6_output+0x205/0x770 [ 1215.127707] ? ip6_finish_output+0x10f0/0x10f0 [ 1215.132411] ? ip6_fragment+0x34e0/0x34e0 [ 1215.136853] ip6_xmit+0xdbf/0x20a0 [ 1215.140412] ? ip6_append_data+0x330/0x330 [ 1215.145111] ? rcu_nmi_exit+0xb3/0x180 [ 1215.149010] ? ac6_proc_exit+0x50/0x50 [ 1215.153096] ? check_preemption_disabled+0x41/0x280 [ 1215.158225] inet6_csk_xmit+0x2fb/0x5c0 [ 1215.162224] ? inet6_csk_update_pmtu+0x180/0x180 [ 1215.167004] ? udp6_set_csum+0x299/0x590 [ 1215.171085] l2tp_xmit_skb+0xec6/0x1590 [ 1215.175077] pppol2tp_sendmsg+0x473/0x660 [ 1215.179259] ? security_socket_sendmsg+0x83/0xb0 [ 1215.184021] ? pppol2tp_recvmsg+0x270/0x270 [ 1215.188362] sock_sendmsg+0xc3/0x120 [ 1215.192438] sock_no_sendpage+0xf5/0x140 [ 1215.196515] ? __sk_mem_schedule+0xd0/0xd0 [ 1215.200756] ? pipe_lock+0x63/0x80 [ 1215.204312] ? mark_held_locks+0xa6/0xf0 [ 1215.208379] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1215.213149] sock_sendpage+0x10d/0x140 [ 1215.217054] pipe_to_sendpage+0x268/0x330 [ 1215.221216] ? sockfs_setattr+0x160/0x160 [ 1215.225377] ? direct_splice_actor+0x160/0x160 [ 1215.229971] ? direct_splice_actor+0x160/0x160 [ 1215.234570] __splice_from_pipe+0x389/0x800 [ 1215.238913] ? direct_splice_actor+0x160/0x160 [ 1215.243519] generic_splice_sendpage+0xd4/0x140 [ 1215.248293] ? __splice_from_pipe+0x800/0x800 [ 1215.252813] ? security_file_permission+0x1c0/0x220 [ 1215.257856] ? __splice_from_pipe+0x800/0x800 [ 1215.262376] __se_sys_splice+0xfe7/0x16d0 [ 1215.266641] ? ksys_write+0x1c8/0x2a0 [ 1215.270463] ? __se_sys_tee+0xb90/0xb90 [ 1215.274477] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1215.279508] ? do_syscall_64+0x21/0x620 [ 1215.283608] do_syscall_64+0xf9/0x620 [ 1215.288117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.302276] RIP: 0033:0x7ff9a60830d9 [ 1215.306626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1215.325884] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1215.333821] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1215.341451] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1215.348841] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1215.356211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.364230] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 8) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x2) io_setup(0x800, &(0x7f0000000040)=0x0) (async) ftruncate(r6, 0x7fff) io_submit(r7, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x200a00}]) (async) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 1215.540659] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x2) io_setup(0x800, &(0x7f0000000040)=0x0) ftruncate(r6, 0x7fff) (async) io_submit(r7, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x200a00}]) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:04 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1215.709688] FAULT_INJECTION: forcing a failure. [ 1215.709688] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1215.721709] CPU: 1 PID: 2453 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1215.729511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1215.738871] Call Trace: [ 1215.741479] dump_stack+0x1fc/0x2ef [ 1215.745130] should_fail.cold+0xa/0xf [ 1215.748955] ? setup_fault_attr+0x200/0x200 [ 1215.753347] ? lock_downgrade+0x720/0x720 [ 1215.757608] __alloc_pages_nodemask+0x239/0x2890 [ 1215.762394] ? is_bpf_text_address+0xfc/0x1b0 [ 1215.766917] ? kernel_text_address+0xbd/0xf0 [ 1215.771434] ? __kernel_text_address+0x9/0x30 [ 1215.775951] ? unwind_get_return_address+0x51/0x90 [ 1215.780895] ? __save_stack_trace+0xaf/0x190 [ 1215.785337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1215.790210] ? kasan_kmalloc+0x139/0x160 [ 1215.794378] ? mark_held_locks+0xa6/0xf0 [ 1215.798458] ? pppol2tp_sendmsg+0x473/0x660 [ 1215.802888] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1215.807661] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1215.812271] cache_grow_begin+0xa4/0x8a0 [ 1215.816361] ? setup_fault_attr+0x200/0x200 [ 1215.820698] cache_alloc_refill+0x273/0x340 [ 1215.825045] kmem_cache_alloc_node_trace+0x39e/0x3b0 [ 1215.830172] __kmalloc_node_track_caller+0x38/0x70 [ 1215.835129] pskb_expand_head+0x159/0xf20 [ 1215.839300] ? skb_clone+0x1b2/0x3d0 [ 1215.843119] skb_realloc_headroom+0xa4/0x110 [ 1215.843777] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1215.847621] ip6_xmit+0x173e/0x20a0 20:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1215.847647] ? ip6_append_data+0x330/0x330 [ 1215.861822] ? retint_kernel+0x2d/0x2d [ 1215.865855] ? check_preemption_disabled+0x41/0x280 [ 1215.870897] inet6_csk_xmit+0x2fb/0x5c0 [ 1215.874895] ? inet6_csk_update_pmtu+0x180/0x180 [ 1215.879774] l2tp_xmit_skb+0xec6/0x1590 [ 1215.883771] pppol2tp_sendmsg+0x473/0x660 [ 1215.888047] ? security_socket_sendmsg+0x83/0xb0 [ 1215.893007] ? pppol2tp_recvmsg+0x270/0x270 [ 1215.897341] sock_sendmsg+0xc3/0x120 [ 1215.901075] sock_no_sendpage+0xf5/0x140 [ 1215.905346] ? __sk_mem_schedule+0xd0/0xd0 [ 1215.910489] ? mark_held_locks+0xa6/0xf0 [ 1215.914657] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1215.919436] sock_sendpage+0x10d/0x140 [ 1215.923696] pipe_to_sendpage+0x268/0x330 [ 1215.927855] ? sockfs_setattr+0x160/0x160 [ 1215.932026] ? direct_splice_actor+0x160/0x160 [ 1215.936768] ? __splice_from_pipe+0x24b/0x800 [ 1215.941380] __splice_from_pipe+0x389/0x800 [ 1215.945722] ? direct_splice_actor+0x160/0x160 [ 1215.950325] generic_splice_sendpage+0xd4/0x140 [ 1215.955185] ? __splice_from_pipe+0x800/0x800 [ 1215.959705] ? security_file_permission+0x1c0/0x220 [ 1215.964735] ? __splice_from_pipe+0x800/0x800 [ 1215.969243] __se_sys_splice+0xfe7/0x16d0 [ 1215.973425] ? ksys_write+0x1c8/0x2a0 [ 1215.977243] ? __se_sys_tee+0xb90/0xb90 [ 1215.981376] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1215.986491] ? do_syscall_64+0x21/0x620 [ 1215.990607] do_syscall_64+0xf9/0x620 [ 1215.994517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.999717] RIP: 0033:0x7ff9a60830d9 [ 1216.003445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1216.022531] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1216.030253] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1216.037536] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1216.045081] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1216.052368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.059654] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 9) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:05 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0xf22496d926ab14c1, 0x92, 0x1, 0x1000, 0x4, @remote, @private1, 0x8, 0x40, 0xffffffc5, 0x7ff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xdc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048000}, 0x44000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r9 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1216.301405] FAULT_INJECTION: forcing a failure. [ 1216.301405] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.312774] CPU: 1 PID: 2485 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1216.320940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1216.330307] Call Trace: [ 1216.332926] dump_stack+0x1fc/0x2ef [ 1216.336579] should_fail.cold+0xa/0xf [ 1216.340534] ? setup_fault_attr+0x200/0x200 [ 1216.345496] ? lockdep_hardirqs_on+0x288/0x5c0 20:11:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1216.350098] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1216.354961] __should_failslab+0x115/0x180 [ 1216.359215] should_failslab+0x5/0x10 [ 1216.363032] kmem_cache_alloc_node+0x54/0x3b0 [ 1216.367552] __alloc_skb+0x71/0x560 [ 1216.371371] ip6_fragment+0x1583/0x34e0 [ 1216.375372] ? ip6_forward_finish+0x4b0/0x4b0 [ 1216.379888] ? ip6_forward+0x3750/0x3750 [ 1216.383970] ip6_finish_output+0x9da/0x10f0 [ 1216.388307] ip6_output+0x205/0x770 [ 1216.391950] ? ip6_finish_output+0x10f0/0x10f0 [ 1216.396549] ? ip6_fragment+0x34e0/0x34e0 [ 1216.400722] ip6_xmit+0xdbf/0x20a0 [ 1216.404282] ? ip6_append_data+0x330/0x330 [ 1216.408534] ? ac6_proc_exit+0x50/0x50 [ 1216.412441] ? check_preemption_disabled+0x41/0x280 [ 1216.417497] inet6_csk_xmit+0x2fb/0x5c0 [ 1216.421505] ? inet6_csk_update_pmtu+0x180/0x180 [ 1216.426468] ? udp6_set_csum+0x299/0x590 [ 1216.430633] l2tp_xmit_skb+0xec6/0x1590 [ 1216.434638] pppol2tp_sendmsg+0x473/0x660 [ 1216.438893] ? pppol2tp_recvmsg+0x270/0x270 [ 1216.443232] sock_sendmsg+0xc3/0x120 [ 1216.446961] sock_no_sendpage+0xf5/0x140 20:11:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1216.451902] ? __sk_mem_schedule+0xd0/0xd0 [ 1216.456204] ? retint_kernel+0x2d/0x2d [ 1216.460115] sock_sendpage+0x10d/0x140 [ 1216.464024] pipe_to_sendpage+0x268/0x330 [ 1216.468272] ? sockfs_setattr+0x160/0x160 [ 1216.472701] ? direct_splice_actor+0x160/0x160 [ 1216.477300] ? splice_from_pipe_next.part.0+0x2c4/0x360 [ 1216.482695] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1216.488191] __splice_from_pipe+0x389/0x800 [ 1216.493578] ? direct_splice_actor+0x160/0x160 20:11:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1216.498184] generic_splice_sendpage+0xd4/0x140 [ 1216.502866] ? __splice_from_pipe+0x800/0x800 [ 1216.507376] ? retint_kernel+0x2d/0x2d [ 1216.511374] ? security_file_permission+0x1c0/0x220 [ 1216.514321] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1216.516459] ? __splice_from_pipe+0x800/0x800 [ 1216.516473] __se_sys_splice+0xfe7/0x16d0 [ 1216.516499] ? ksys_write+0x1c8/0x2a0 [ 1216.516513] ? __se_sys_tee+0xb90/0xb90 [ 1216.516532] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1216.516553] ? do_syscall_64+0x21/0x620 [ 1216.548150] do_syscall_64+0xf9/0x620 [ 1216.552103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1216.557660] RIP: 0033:0x7ff9a60830d9 [ 1216.561399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1216.580503] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1216.588405] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1216.595687] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1216.602971] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1216.610364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.617734] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:05 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df541252c456ebc9d1942f8caa77d5a20049bc224ef2"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x27190000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0xf22496d926ab14c1, 0x92, 0x1, 0x1000, 0x4, @remote, @private1, 0x8, 0x40, 0xffffffc5, 0x7ff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xdc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048000}, 0x44000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async) r9 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1216.990632] FAULT_INJECTION: forcing a failure. [ 1216.990632] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.002082] CPU: 0 PID: 2524 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1217.010017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1217.019433] Call Trace: [ 1217.022046] dump_stack+0x1fc/0x2ef [ 1217.025709] should_fail.cold+0xa/0xf [ 1217.029721] ? setup_fault_attr+0x200/0x200 [ 1217.034150] ? setup_fault_attr+0x200/0x200 [ 1217.036416] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1217.038494] ? ip6_finish_output2+0x11ae/0x2290 [ 1217.038513] __should_failslab+0x115/0x180 [ 1217.038531] should_failslab+0x5/0x10 [ 1217.057689] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1217.062822] __kmalloc_node_track_caller+0x38/0x70 [ 1217.067784] __alloc_skb+0xae/0x560 [ 1217.071520] ip6_fragment+0x1583/0x34e0 [ 1217.075524] ? ip6_forward_finish+0x4b0/0x4b0 [ 1217.080051] ? check_preemption_disabled+0x41/0x280 [ 1217.085176] ? ip6_forward+0x3750/0x3750 [ 1217.089271] ip6_finish_output+0x9da/0x10f0 [ 1217.093619] ip6_output+0x205/0x770 [ 1217.097265] ? ip6_finish_output+0x10f0/0x10f0 [ 1217.102259] ? ip6_fragment+0x34e0/0x34e0 [ 1217.106608] ip6_xmit+0xdbf/0x20a0 [ 1217.110189] ? ip6_append_data+0x330/0x330 [ 1217.114447] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1217.119053] ? ac6_proc_exit+0x50/0x50 [ 1217.123051] ? rcu_nmi_exit+0xb3/0x180 [ 1217.126969] ? check_preemption_disabled+0x41/0x280 [ 1217.132096] inet6_csk_xmit+0x2fb/0x5c0 [ 1217.136097] ? inet6_csk_update_pmtu+0x180/0x180 20:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1217.141032] ? udp6_set_csum+0x299/0x590 [ 1217.145301] l2tp_xmit_skb+0xec6/0x1590 [ 1217.149309] pppol2tp_sendmsg+0x473/0x660 [ 1217.153654] ? security_socket_sendmsg+0x83/0xb0 [ 1217.158424] ? pppol2tp_recvmsg+0x270/0x270 [ 1217.162859] sock_sendmsg+0xc3/0x120 [ 1217.166593] sock_no_sendpage+0xf5/0x140 [ 1217.170755] ? __sk_mem_schedule+0xd0/0xd0 [ 1217.175001] ? rcu_nmi_exit+0xb3/0x180 [ 1217.178906] ? mark_held_locks+0xa6/0xf0 [ 1217.183017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1217.187787] sock_sendpage+0x10d/0x140 [ 1217.191788] pipe_to_sendpage+0x268/0x330 [ 1217.195947] ? sockfs_setattr+0x160/0x160 [ 1217.200282] ? direct_splice_actor+0x160/0x160 [ 1217.205042] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1217.210510] __splice_from_pipe+0x389/0x800 [ 1217.214846] ? direct_splice_actor+0x160/0x160 [ 1217.219440] generic_splice_sendpage+0xd4/0x140 [ 1217.224135] ? __splice_from_pipe+0x800/0x800 [ 1217.228671] ? security_file_permission+0x1c0/0x220 [ 1217.233713] ? __splice_from_pipe+0x800/0x800 20:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1217.238220] __se_sys_splice+0xfe7/0x16d0 [ 1217.242738] ? ksys_write+0x1c8/0x2a0 [ 1217.246643] ? __se_sys_tee+0xb90/0xb90 [ 1217.250638] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1217.255664] ? do_syscall_64+0x21/0x620 [ 1217.259656] do_syscall_64+0xf9/0x620 [ 1217.263481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.268683] RIP: 0033:0x7ff9a60830d9 [ 1217.272421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1217.291452] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1217.299175] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1217.306456] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1217.313737] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1217.321019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.328308] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 11) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0xf22496d926ab14c1, 0x92, 0x1, 0x1000, 0x4, @remote, @private1, 0x8, 0x40, 0xffffffc5, 0x7ff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0xdc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048000}, 0x44000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 64) r9 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async, rerun: 64) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) (async, rerun: 64) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1217.583447] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:06 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1217.747591] FAULT_INJECTION: forcing a failure. [ 1217.747591] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.758990] CPU: 1 PID: 2577 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1217.766880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1217.776345] Call Trace: [ 1217.778972] dump_stack+0x1fc/0x2ef [ 1217.782621] should_fail.cold+0xa/0xf [ 1217.786456] ? setup_fault_attr+0x200/0x200 [ 1217.790795] ? ipv6_chk_mcast_addr+0x129/0x6c0 [ 1217.795493] __should_failslab+0x115/0x180 [ 1217.800021] should_failslab+0x5/0x10 [ 1217.804243] kmem_cache_alloc+0x3f/0x370 [ 1217.808332] skb_clone+0x151/0x3d0 [ 1217.811982] ip6_finish_output2+0x1551/0x2290 [ 1217.816503] ? ip6_forward_finish+0x4b0/0x4b0 [ 1217.821199] ? memcpy+0x35/0x50 [ 1217.825107] ? skb_copy_bits+0x517/0x770 [ 1217.830451] ? check_memory_region+0xcb/0x170 [ 1217.835182] ip6_fragment+0x1431/0x34e0 [ 1217.839199] ? ip6_forward_finish+0x4b0/0x4b0 [ 1217.843821] ? check_preemption_disabled+0x41/0x280 [ 1217.848944] ? ip6_forward+0x3750/0x3750 [ 1217.853793] ip6_finish_output+0x9da/0x10f0 [ 1217.858141] ip6_output+0x205/0x770 [ 1217.861882] ? ip6_finish_output+0x10f0/0x10f0 [ 1217.866488] ? ip6_fragment+0x34e0/0x34e0 [ 1217.870663] ip6_xmit+0xdbf/0x20a0 [ 1217.874234] ? ip6_append_data+0x330/0x330 [ 1217.878492] ? ac6_proc_exit+0x50/0x50 [ 1217.882413] ? preempt_count_sub+0x47/0x150 [ 1217.886765] inet6_csk_xmit+0x2fb/0x5c0 [ 1217.890774] ? inet6_csk_update_pmtu+0x180/0x180 20:11:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1217.895567] ? udp6_set_csum+0x299/0x590 [ 1217.899760] l2tp_xmit_skb+0xec6/0x1590 [ 1217.903880] pppol2tp_sendmsg+0x473/0x660 [ 1217.908173] ? security_socket_sendmsg+0x83/0xb0 [ 1217.913133] ? pppol2tp_recvmsg+0x270/0x270 [ 1217.917478] sock_sendmsg+0xc3/0x120 [ 1217.921314] sock_no_sendpage+0xf5/0x140 [ 1217.925512] ? __sk_mem_schedule+0xd0/0xd0 [ 1217.929791] ? mark_held_locks+0xa6/0xf0 [ 1217.933891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1217.938674] sock_sendpage+0x10d/0x140 [ 1217.942592] pipe_to_sendpage+0x268/0x330 [ 1217.946765] ? sockfs_setattr+0x160/0x160 [ 1217.950945] ? direct_splice_actor+0x160/0x160 [ 1217.955659] ? __splice_from_pipe+0x24b/0x800 [ 1217.960175] __splice_from_pipe+0x389/0x800 [ 1217.964689] ? direct_splice_actor+0x160/0x160 [ 1217.969318] generic_splice_sendpage+0xd4/0x140 [ 1217.974012] ? __splice_from_pipe+0x800/0x800 [ 1217.978531] ? retint_kernel+0x2d/0x2d [ 1217.982461] ? security_file_permission+0x1c0/0x220 [ 1217.987598] ? __splice_from_pipe+0x800/0x800 [ 1217.993772] __se_sys_splice+0xfe7/0x16d0 [ 1217.997956] ? ksys_write+0x1c8/0x2a0 [ 1218.001790] ? __se_sys_tee+0xb90/0xb90 [ 1218.005787] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1218.010826] ? do_syscall_64+0x21/0x620 [ 1218.014819] do_syscall_64+0xf9/0x620 [ 1218.018639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1218.023843] RIP: 0033:0x7ff9a60830d9 [ 1218.027574] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1218.046759] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1218.054760] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1218.062468] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1218.069744] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1218.077205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.084491] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df541252c456ebc9d1942f8caa77d5a20049bc224ef2"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 12) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:07 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:07 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x96190000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1218.310791] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1218.426088] FAULT_INJECTION: forcing a failure. [ 1218.426088] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.437459] CPU: 0 PID: 2616 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1218.445277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1218.454647] Call Trace: [ 1218.457252] dump_stack+0x1fc/0x2ef [ 1218.460903] should_fail.cold+0xa/0xf [ 1218.464810] ? setup_fault_attr+0x200/0x200 [ 1218.469151] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1218.473751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1218.478524] __should_failslab+0x115/0x180 [ 1218.482771] should_failslab+0x5/0x10 [ 1218.486686] kmem_cache_alloc_node+0x54/0x3b0 [ 1218.491284] __alloc_skb+0x71/0x560 [ 1218.494919] ip6_fragment+0x1583/0x34e0 [ 1218.498914] ? ip6_forward_finish+0x4b0/0x4b0 [ 1218.503431] ? ip6_forward+0x3750/0x3750 [ 1218.507511] ip6_finish_output+0x9da/0x10f0 [ 1218.512032] ip6_output+0x205/0x770 [ 1218.515673] ? ip6_finish_output+0x10f0/0x10f0 [ 1218.520273] ? ip6_fragment+0x34e0/0x34e0 [ 1218.524434] ip6_xmit+0xdbf/0x20a0 [ 1218.527986] ? ip6_append_data+0x330/0x330 [ 1218.532233] ? ip6_dst_check+0x323/0x710 [ 1218.536305] ? ac6_proc_exit+0x50/0x50 [ 1218.540210] ? check_preemption_disabled+0x41/0x280 [ 1218.545245] inet6_csk_xmit+0x2fb/0x5c0 [ 1218.549304] ? inet6_csk_update_pmtu+0x180/0x180 [ 1218.554166] ? udp6_set_csum+0x299/0x590 [ 1218.558258] l2tp_xmit_skb+0xec6/0x1590 [ 1218.562271] pppol2tp_sendmsg+0x473/0x660 [ 1218.566428] ? security_socket_sendmsg+0x83/0xb0 [ 1218.571725] ? pppol2tp_recvmsg+0x270/0x270 [ 1218.576063] sock_sendmsg+0xc3/0x120 [ 1218.579878] sock_no_sendpage+0xf5/0x140 [ 1218.583959] ? __sk_mem_schedule+0xd0/0xd0 [ 1218.588219] ? mark_held_locks+0xa6/0xf0 [ 1218.592296] ? io_schedule_timeout+0x140/0x140 [ 1218.596975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1218.601762] sock_sendpage+0x10d/0x140 [ 1218.605668] pipe_to_sendpage+0x268/0x330 [ 1218.609830] ? sockfs_setattr+0x160/0x160 [ 1218.614000] ? direct_splice_actor+0x160/0x160 [ 1218.618816] ? __splice_from_pipe+0x24b/0x800 [ 1218.623330] __splice_from_pipe+0x389/0x800 [ 1218.627671] ? direct_splice_actor+0x160/0x160 [ 1218.633832] generic_splice_sendpage+0xd4/0x140 [ 1218.638600] ? __splice_from_pipe+0x800/0x800 [ 1218.643378] ? security_file_permission+0x1c0/0x220 [ 1218.648412] ? __splice_from_pipe+0x800/0x800 [ 1218.657784] __se_sys_splice+0xfe7/0x16d0 [ 1218.661959] ? ksys_write+0x1c8/0x2a0 [ 1218.665782] ? __se_sys_tee+0xb90/0xb90 [ 1218.669775] ? trace_hardirqs_off_caller+0x6e/0x210 20:11:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1218.674809] ? do_syscall_64+0x21/0x620 [ 1218.678811] do_syscall_64+0xf9/0x620 [ 1218.682643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1218.687838] RIP: 0033:0x7ff9a60830d9 [ 1218.691562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1218.710579] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1218.718305] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1218.725590] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1218.732870] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1218.740141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.747404] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 13) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r2) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:08 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="292f00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1218.957025] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1218.989183] FAULT_INJECTION: forcing a failure. [ 1218.989183] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.000673] CPU: 1 PID: 2652 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1219.008493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1219.017855] Call Trace: [ 1219.020469] dump_stack+0x1fc/0x2ef [ 1219.024910] should_fail.cold+0xa/0xf [ 1219.028728] ? setup_fault_attr+0x200/0x200 [ 1219.033155] ? ip6_finish_output2+0x1176/0x2290 [ 1219.038013] ? setup_fault_attr+0x200/0x200 [ 1219.042524] ? ip6_finish_output2+0x11ae/0x2290 [ 1219.047297] __should_failslab+0x115/0x180 [ 1219.051707] should_failslab+0x5/0x10 [ 1219.055525] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1219.060753] __kmalloc_node_track_caller+0x38/0x70 [ 1219.065721] __alloc_skb+0xae/0x560 [ 1219.069398] ip6_fragment+0x1583/0x34e0 [ 1219.073405] ? ip6_forward_finish+0x4b0/0x4b0 [ 1219.077926] ? check_preemption_disabled+0x41/0x280 [ 1219.082964] ? ip6_forward+0x3750/0x3750 [ 1219.087049] ip6_finish_output+0x9da/0x10f0 [ 1219.091394] ip6_output+0x205/0x770 [ 1219.095037] ? ip6_finish_output+0x10f0/0x10f0 [ 1219.099635] ? ip6_fragment+0x34e0/0x34e0 [ 1219.103808] ip6_xmit+0xdbf/0x20a0 [ 1219.107372] ? ip6_append_data+0x330/0x330 [ 1219.111627] ? ac6_proc_exit+0x50/0x50 [ 1219.115544] ? check_preemption_disabled+0x41/0x280 [ 1219.120586] inet6_csk_xmit+0x2fb/0x5c0 [ 1219.124589] ? inet6_csk_update_pmtu+0x180/0x180 [ 1219.129408] ? udp6_set_csum+0x299/0x590 [ 1219.133489] l2tp_xmit_skb+0xec6/0x1590 [ 1219.137587] pppol2tp_sendmsg+0x473/0x660 [ 1219.142802] ? security_socket_sendmsg+0x83/0xb0 [ 1219.147576] ? pppol2tp_recvmsg+0x270/0x270 [ 1219.151924] sock_sendmsg+0xc3/0x120 [ 1219.155658] sock_no_sendpage+0xf5/0x140 [ 1219.159735] ? __sk_mem_schedule+0xd0/0xd0 [ 1219.163987] ? mark_held_locks+0xa6/0xf0 [ 1219.168068] ? rcu_nmi_exit+0xb3/0x180 [ 1219.171974] sock_sendpage+0x10d/0x140 [ 1219.175882] pipe_to_sendpage+0x268/0x330 [ 1219.180041] ? sockfs_setattr+0x160/0x160 [ 1219.184204] ? direct_splice_actor+0x160/0x160 [ 1219.188805] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1219.194188] __splice_from_pipe+0x389/0x800 [ 1219.198536] ? direct_splice_actor+0x160/0x160 [ 1219.203148] generic_splice_sendpage+0xd4/0x140 [ 1219.207883] ? __splice_from_pipe+0x800/0x800 [ 1219.212408] ? security_file_permission+0x1c0/0x220 [ 1219.217449] ? __splice_from_pipe+0x800/0x800 [ 1219.221972] __se_sys_splice+0xfe7/0x16d0 [ 1219.226152] ? ksys_write+0x1c8/0x2a0 [ 1219.229972] ? __se_sys_tee+0xb90/0xb90 [ 1219.234027] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1219.239063] ? do_syscall_64+0x21/0x620 [ 1219.243056] do_syscall_64+0xf9/0x620 [ 1219.246875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1219.252076] RIP: 0033:0x7ff9a60830d9 [ 1219.255800] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1219.274803] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1219.282531] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1219.289908] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1219.297484] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 20:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket(0x10, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xd) (rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) (async, rerun: 32) fsetxattr$security_evm(r0, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59c", @ANYRES32=r2, @ANYBLOB, @ANYRESOCT], 0x3f, 0x3) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x1c) (async) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df54"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 20:11:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1219.304772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.312055] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1219.396111] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 14) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1219.878289] FAULT_INJECTION: forcing a failure. [ 1219.878289] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.889720] CPU: 1 PID: 2709 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1219.897532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1219.906895] Call Trace: [ 1219.909507] dump_stack+0x1fc/0x2ef [ 1219.913162] should_fail.cold+0xa/0xf [ 1219.916978] ? setup_fault_attr+0x200/0x200 [ 1219.921312] ? ipv6_chk_mcast_addr+0x129/0x6c0 [ 1219.925922] __should_failslab+0x115/0x180 [ 1219.930199] should_failslab+0x5/0x10 [ 1219.934012] kmem_cache_alloc+0x3f/0x370 [ 1219.938095] skb_clone+0x151/0x3d0 [ 1219.941652] ip6_finish_output2+0x1551/0x2290 [ 1219.946167] ? ip6_forward_finish+0x4b0/0x4b0 [ 1219.950667] ? memcpy_erms+0x6/0x10 [ 1219.954318] ? skb_copy_bits+0x517/0x770 [ 1219.958563] ? memset+0x20/0x40 [ 1219.961859] ? __alloc_skb+0x34f/0x560 [ 1219.965768] ip6_fragment+0x1431/0x34e0 [ 1219.969767] ? ip6_forward_finish+0x4b0/0x4b0 [ 1219.975064] ? check_preemption_disabled+0x41/0x280 [ 1219.980098] ? ip6_forward+0x3750/0x3750 [ 1219.984184] ip6_finish_output+0x9da/0x10f0 [ 1219.988534] ip6_output+0x205/0x770 [ 1219.992348] ? ip6_finish_output+0x10f0/0x10f0 [ 1219.996946] ? ip6_fragment+0x34e0/0x34e0 [ 1220.001152] ip6_xmit+0xdbf/0x20a0 [ 1220.004720] ? ip6_append_data+0x330/0x330 [ 1220.008960] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1220.013672] ? ac6_proc_exit+0x50/0x50 [ 1220.017609] ? retint_kernel+0x2d/0x2d [ 1220.021523] ? lock_is_held_type+0x17a/0x210 [ 1220.025953] inet6_csk_xmit+0x2fb/0x5c0 [ 1220.030055] ? inet6_csk_update_pmtu+0x180/0x180 [ 1220.034840] ? udp6_set_csum+0x299/0x590 [ 1220.038924] l2tp_xmit_skb+0xec6/0x1590 [ 1220.042926] pppol2tp_sendmsg+0x473/0x660 [ 1220.047195] ? security_socket_sendmsg+0x83/0xb0 [ 1220.052059] ? pppol2tp_recvmsg+0x270/0x270 [ 1220.056399] sock_sendmsg+0xc3/0x120 [ 1220.060171] sock_no_sendpage+0xf5/0x140 [ 1220.064244] ? __sk_mem_schedule+0xd0/0xd0 [ 1220.068502] ? rcu_nmi_exit+0xb3/0x180 [ 1220.072417] ? sock_sendpage+0xf9/0x140 [ 1220.076504] sock_sendpage+0x10d/0x140 [ 1220.080416] pipe_to_sendpage+0x268/0x330 [ 1220.084573] ? sockfs_setattr+0x160/0x160 [ 1220.088735] ? direct_splice_actor+0x160/0x160 [ 1220.093768] ? direct_splice_actor+0x160/0x160 [ 1220.098373] __splice_from_pipe+0x389/0x800 [ 1220.102714] ? direct_splice_actor+0x160/0x160 [ 1220.107316] generic_splice_sendpage+0xd4/0x140 [ 1220.111997] ? __splice_from_pipe+0x800/0x800 [ 1220.116523] ? security_file_permission+0x1c0/0x220 [ 1220.121750] ? __splice_from_pipe+0x800/0x800 [ 1220.126262] __se_sys_splice+0xfe7/0x16d0 [ 1220.130444] ? rcu_nmi_exit+0xb3/0x180 [ 1220.134616] ? retint_kernel+0x2d/0x2d [ 1220.138519] ? __se_sys_tee+0xb90/0xb90 [ 1220.142518] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1220.147563] ? do_syscall_64+0x21/0x620 [ 1220.151560] do_syscall_64+0xf9/0x620 [ 1220.155381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1220.160936] RIP: 0033:0x7ff9a60830d9 [ 1220.164670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1220.183569] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1220.191287] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1220.198773] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1220.206059] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1220.213322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.220594] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 15) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x12dd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1220.547947] FAULT_INJECTION: forcing a failure. [ 1220.547947] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.578373] CPU: 1 PID: 2747 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1220.586209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1220.595747] Call Trace: [ 1220.598361] dump_stack+0x1fc/0x2ef [ 1220.602008] should_fail.cold+0xa/0xf [ 1220.605830] ? setup_fault_attr+0x200/0x200 [ 1220.610178] __should_failslab+0x115/0x180 [ 1220.614444] should_failslab+0x5/0x10 [ 1220.618264] kmem_cache_alloc_node+0x245/0x3b0 [ 1220.622874] __alloc_skb+0x71/0x560 [ 1220.626535] sock_wmalloc+0xd0/0x120 [ 1220.630268] pppol2tp_sendmsg+0x234/0x660 [ 1220.634438] ? security_socket_sendmsg+0x83/0xb0 [ 1220.639247] ? pppol2tp_recvmsg+0x270/0x270 [ 1220.643762] sock_sendmsg+0xc3/0x120 [ 1220.647493] sock_no_sendpage+0xf5/0x140 [ 1220.651749] ? __sk_mem_schedule+0xd0/0xd0 [ 1220.656061] ? rcu_nmi_exit+0xb3/0x180 [ 1220.660506] sock_sendpage+0x10d/0x140 [ 1220.665370] pipe_to_sendpage+0x268/0x330 [ 1220.669531] ? sockfs_setattr+0x160/0x160 [ 1220.673697] ? direct_splice_actor+0x160/0x160 [ 1220.678301] __splice_from_pipe+0x389/0x800 [ 1220.682646] ? direct_splice_actor+0x160/0x160 [ 1220.687595] generic_splice_sendpage+0xd4/0x140 [ 1220.692307] ? __splice_from_pipe+0x800/0x800 [ 1220.696921] ? security_file_permission+0x1c0/0x220 [ 1220.702048] ? __splice_from_pipe+0x800/0x800 [ 1220.706560] __se_sys_splice+0xfe7/0x16d0 [ 1220.710735] ? ksys_write+0x1c8/0x2a0 [ 1220.714555] ? __se_sys_tee+0xb90/0xb90 [ 1220.718549] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1220.723588] ? do_syscall_64+0x21/0x620 [ 1220.727586] do_syscall_64+0xf9/0x620 [ 1220.731412] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1220.736620] RIP: 0033:0x7ff9a60830d9 [ 1220.740346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1220.759254] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1220.766977] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1220.774345] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1220.781722] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1220.789182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.796653] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df541252c456ebc9d1942f8caa77d5a20049bc224ef2"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 16) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:10 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xdd12, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1221.023297] FAULT_INJECTION: forcing a failure. [ 1221.023297] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.060053] CPU: 1 PID: 2782 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1221.067959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1221.077326] Call Trace: [ 1221.079928] dump_stack+0x1fc/0x2ef [ 1221.083589] should_fail.cold+0xa/0xf [ 1221.087408] ? setup_fault_attr+0x200/0x200 [ 1221.091746] ? lock_acquire+0x170/0x3c0 [ 1221.095738] __should_failslab+0x115/0x180 [ 1221.099995] should_failslab+0x5/0x10 [ 1221.103810] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1221.109107] __kmalloc_node_track_caller+0x38/0x70 [ 1221.114065] __alloc_skb+0xae/0x560 [ 1221.117800] sock_wmalloc+0xd0/0x120 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1221.121532] pppol2tp_sendmsg+0x234/0x660 [ 1221.125720] ? security_socket_sendmsg+0x83/0xb0 [ 1221.130507] ? pppol2tp_recvmsg+0x270/0x270 [ 1221.134846] sock_sendmsg+0xc3/0x120 [ 1221.138573] sock_no_sendpage+0xf5/0x140 [ 1221.142648] ? __sk_mem_schedule+0xd0/0xd0 [ 1221.146907] ? retint_kernel+0x2d/0x2d [ 1221.150813] sock_sendpage+0x10d/0x140 [ 1221.154721] pipe_to_sendpage+0x268/0x330 [ 1221.158963] ? sockfs_setattr+0x160/0x160 [ 1221.163214] ? direct_splice_actor+0x160/0x160 [ 1221.167819] __splice_from_pipe+0x389/0x800 [ 1221.172159] ? direct_splice_actor+0x160/0x160 [ 1221.176759] generic_splice_sendpage+0xd4/0x140 [ 1221.181535] ? __splice_from_pipe+0x800/0x800 [ 1221.186062] ? security_file_permission+0x1c0/0x220 [ 1221.191113] ? __splice_from_pipe+0x800/0x800 [ 1221.195623] __se_sys_splice+0xfe7/0x16d0 [ 1221.199817] ? ksys_write+0x1c8/0x2a0 [ 1221.203897] ? __se_sys_tee+0xb90/0xb90 [ 1221.207895] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1221.213101] ? do_syscall_64+0x21/0x620 [ 1221.217101] do_syscall_64+0xf9/0x620 [ 1221.221194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.226485] RIP: 0033:0x7ff9a60830d9 [ 1221.230218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1221.249156] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1221.256880] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1221.264163] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1221.271538] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1221.278833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.286202] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 17) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1221.638526] FAULT_INJECTION: forcing a failure. [ 1221.638526] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.650013] CPU: 1 PID: 2813 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1221.657819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1221.667179] Call Trace: [ 1221.669787] dump_stack+0x1fc/0x2ef [ 1221.673445] should_fail.cold+0xa/0xf [ 1221.677260] ? setup_fault_attr+0x200/0x200 [ 1221.681686] ? rcu_nmi_exit+0xb3/0x180 20:11:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1221.685590] __should_failslab+0x115/0x180 [ 1221.689866] should_failslab+0x5/0x10 [ 1221.693689] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1221.698724] __kmalloc_node_track_caller+0x38/0x70 [ 1221.703671] pskb_expand_head+0x159/0xf20 [ 1221.707836] ? rcu_nmi_exit+0xb3/0x180 [ 1221.711737] l2tp_xmit_skb+0xb6c/0x1590 [ 1221.715913] pppol2tp_sendmsg+0x473/0x660 [ 1221.720099] ? security_socket_sendmsg+0x83/0xb0 [ 1221.724880] ? pppol2tp_recvmsg+0x270/0x270 [ 1221.729309] sock_sendmsg+0xc3/0x120 [ 1221.733035] sock_no_sendpage+0xf5/0x140 [ 1221.737126] ? __sk_mem_schedule+0xd0/0xd0 [ 1221.741378] ? retint_kernel+0x2d/0x2d [ 1221.745284] sock_sendpage+0x10d/0x140 [ 1221.749184] pipe_to_sendpage+0x268/0x330 [ 1221.753336] ? sockfs_setattr+0x160/0x160 [ 1221.757597] ? direct_splice_actor+0x160/0x160 [ 1221.762199] ? __splice_from_pipe+0x24b/0x800 [ 1221.766806] __splice_from_pipe+0x389/0x800 [ 1221.771323] ? direct_splice_actor+0x160/0x160 [ 1221.775939] generic_splice_sendpage+0xd4/0x140 [ 1221.780908] ? __splice_from_pipe+0x800/0x800 20:11:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1221.785609] ? __splice_from_pipe+0x800/0x800 [ 1221.790127] __se_sys_splice+0xfe7/0x16d0 [ 1221.794298] ? ksys_write+0x1c8/0x2a0 [ 1221.798109] ? __se_sys_tee+0xb90/0xb90 [ 1221.802099] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1221.807132] ? do_syscall_64+0x21/0x620 [ 1221.811128] do_syscall_64+0xf9/0x620 [ 1221.815123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.820323] RIP: 0033:0x7ff9a60830d9 [ 1221.824050] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1221.842965] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1221.851228] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1221.858509] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1221.865794] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1221.873078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.880366] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 18) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1222.360990] FAULT_INJECTION: forcing a failure. [ 1222.360990] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.372537] CPU: 0 PID: 2861 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1222.380340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1222.390742] Call Trace: [ 1222.393364] dump_stack+0x1fc/0x2ef [ 1222.397015] should_fail.cold+0xa/0xf [ 1222.400840] ? setup_fault_attr+0x200/0x200 [ 1222.405176] ? __lock_acquire+0x6de/0x3ff0 [ 1222.409435] __should_failslab+0x115/0x180 [ 1222.413699] should_failslab+0x5/0x10 [ 1222.417516] kmem_cache_alloc+0x3f/0x370 [ 1222.421596] skb_clone+0x151/0x3d0 [ 1222.425155] skb_realloc_headroom+0x82/0x110 [ 1222.429583] ip6_xmit+0x173e/0x20a0 [ 1222.433237] ? ip6_append_data+0x330/0x330 [ 1222.437490] ? ip6_dst_check+0x323/0x710 [ 1222.441568] ? __sk_dst_check+0x139/0x2d0 [ 1222.445739] ? check_preemption_disabled+0x41/0x280 [ 1222.450779] inet6_csk_xmit+0x2fb/0x5c0 [ 1222.454771] ? inet6_csk_update_pmtu+0x180/0x180 [ 1222.459546] ? udp6_set_csum+0x299/0x590 [ 1222.463625] l2tp_xmit_skb+0xec6/0x1590 [ 1222.467630] pppol2tp_sendmsg+0x473/0x660 [ 1222.471801] ? security_socket_sendmsg+0x83/0xb0 [ 1222.476582] ? pppol2tp_recvmsg+0x270/0x270 [ 1222.480920] sock_sendmsg+0xc3/0x120 [ 1222.484648] sock_no_sendpage+0xf5/0x140 [ 1222.488726] ? __sk_mem_schedule+0xd0/0xd0 [ 1222.493001] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1222.497595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1222.502369] sock_sendpage+0x10d/0x140 [ 1222.506273] pipe_to_sendpage+0x268/0x330 [ 1222.510428] ? sockfs_setattr+0x160/0x160 [ 1222.514592] ? direct_splice_actor+0x160/0x160 [ 1222.519188] ? page_cache_pipe_buf_release+0xe/0x280 [ 1222.524308] ? page_cache_pipe_buf_release+0x51/0x280 [ 1222.529527] __splice_from_pipe+0x389/0x800 [ 1222.533874] ? direct_splice_actor+0x160/0x160 [ 1222.538650] generic_splice_sendpage+0xd4/0x140 [ 1222.543335] ? __splice_from_pipe+0x800/0x800 [ 1222.547858] ? security_file_permission+0x1c0/0x220 [ 1222.552895] ? __splice_from_pipe+0x800/0x800 [ 1222.557406] __se_sys_splice+0xfe7/0x16d0 [ 1222.561572] ? rcu_nmi_exit+0xb3/0x180 [ 1222.565476] ? retint_kernel+0x2d/0x2d [ 1222.569380] ? __se_sys_tee+0xb90/0xb90 [ 1222.573371] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1222.578400] ? do_syscall_64+0x21/0x620 [ 1222.582390] do_syscall_64+0xf9/0x620 [ 1222.586218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1222.591506] RIP: 0033:0x7ff9a60830d9 [ 1222.595413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1222.614433] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1222.622450] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1222.629836] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1222.637120] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1222.644406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1222.651706] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 19) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:11 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1222.924392] FAULT_INJECTION: forcing a failure. [ 1222.924392] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.935820] CPU: 1 PID: 2905 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1222.943631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1222.952996] Call Trace: [ 1222.955604] dump_stack+0x1fc/0x2ef [ 1222.959253] should_fail.cold+0xa/0xf [ 1222.963077] ? setup_fault_attr+0x200/0x200 [ 1222.967420] ? mark_held_locks+0xa6/0xf0 [ 1222.971728] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1222.976508] __should_failslab+0x115/0x180 [ 1222.980779] should_failslab+0x5/0x10 [ 1222.985035] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1222.990077] __kmalloc_node_track_caller+0x38/0x70 [ 1222.995027] pskb_expand_head+0x159/0xf20 [ 1222.999291] ? pskb_expand_head+0x12/0xf20 [ 1223.003547] skb_realloc_headroom+0xa4/0x110 [ 1223.008074] ip6_xmit+0x173e/0x20a0 [ 1223.011818] ? ip6_append_data+0x330/0x330 [ 1223.016073] ? retint_kernel+0x2d/0x2d [ 1223.020406] ? check_preemption_disabled+0x41/0x280 [ 1223.025557] inet6_csk_xmit+0x2fb/0x5c0 [ 1223.029553] ? inet6_csk_update_pmtu+0x180/0x180 [ 1223.034348] ? l2tp_xmit_skb+0xdd7/0x1590 [ 1223.038524] l2tp_xmit_skb+0xec6/0x1590 [ 1223.042536] pppol2tp_sendmsg+0x473/0x660 [ 1223.046704] ? security_socket_sendmsg+0x83/0xb0 [ 1223.051481] ? pppol2tp_recvmsg+0x270/0x270 [ 1223.055823] sock_sendmsg+0xc3/0x120 [ 1223.059609] sock_no_sendpage+0xf5/0x140 [ 1223.063683] ? __sk_mem_schedule+0xd0/0xd0 [ 1223.067957] sock_sendpage+0x10d/0x140 20:11:12 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1223.071872] pipe_to_sendpage+0x268/0x330 [ 1223.076216] ? sockfs_setattr+0x160/0x160 [ 1223.080388] ? direct_splice_actor+0x160/0x160 [ 1223.084991] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1223.090415] __splice_from_pipe+0x389/0x800 [ 1223.094846] ? direct_splice_actor+0x160/0x160 [ 1223.099461] generic_splice_sendpage+0xd4/0x140 [ 1223.104149] ? __splice_from_pipe+0x800/0x800 [ 1223.108692] ? __splice_from_pipe+0x800/0x800 [ 1223.113204] __se_sys_splice+0xfe7/0x16d0 [ 1223.117380] ? ksys_write+0x1c8/0x2a0 [ 1223.121197] ? __se_sys_tee+0xb90/0xb90 [ 1223.125187] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1223.130221] ? do_syscall_64+0x21/0x620 [ 1223.134219] do_syscall_64+0xf9/0x620 [ 1223.138306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.143599] RIP: 0033:0x7ff9a60830d9 [ 1223.147415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1223.166588] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 20:11:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1223.174349] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1223.181645] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1223.189052] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1223.196333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.203615] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1223.589544] FAULT_INJECTION: forcing a failure. [ 1223.589544] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.601173] CPU: 1 PID: 2950 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1223.608978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1223.618352] Call Trace: [ 1223.620963] dump_stack+0x1fc/0x2ef [ 1223.624759] should_fail.cold+0xa/0xf [ 1223.628594] ? setup_fault_attr+0x200/0x200 [ 1223.633026] ? skb_checksum+0x90/0xc0 [ 1223.636845] __should_failslab+0x115/0x180 [ 1223.641141] should_failslab+0x5/0x10 [ 1223.644957] kmem_cache_alloc_node+0x54/0x3b0 [ 1223.649476] __alloc_skb+0x71/0x560 [ 1223.653122] ip6_fragment+0x1583/0x34e0 [ 1223.657117] ? ip6_forward_finish+0x4b0/0x4b0 [ 1223.661636] ? check_preemption_disabled+0x41/0x280 [ 1223.666672] ? ip6_forward+0x3750/0x3750 [ 1223.670765] ip6_finish_output+0x9da/0x10f0 [ 1223.675121] ip6_output+0x205/0x770 [ 1223.678765] ? ip6_finish_output+0x10f0/0x10f0 [ 1223.683367] ? retint_kernel+0x2d/0x2d [ 1223.687275] ? ip6_fragment+0x34e0/0x34e0 [ 1223.691534] ip6_xmit+0xdbf/0x20a0 [ 1223.695094] ? ip6_append_data+0x330/0x330 [ 1223.699341] ? ip6_dst_check+0x323/0x710 [ 1223.703415] ? ac6_proc_exit+0x50/0x50 [ 1223.707411] ? check_preemption_disabled+0x41/0x280 [ 1223.712624] inet6_csk_xmit+0x2fb/0x5c0 [ 1223.716618] ? inet6_csk_update_pmtu+0x180/0x180 [ 1223.721575] ? udp6_set_csum+0x299/0x590 [ 1223.725659] l2tp_xmit_skb+0xec6/0x1590 [ 1223.729746] pppol2tp_sendmsg+0x473/0x660 [ 1223.733915] ? security_socket_sendmsg+0x83/0xb0 20:11:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x1927, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:12 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="293e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1223.738701] ? pppol2tp_recvmsg+0x270/0x270 [ 1223.743041] sock_sendmsg+0xc3/0x120 [ 1223.746776] sock_no_sendpage+0xf5/0x140 [ 1223.750852] ? __sk_mem_schedule+0xd0/0xd0 [ 1223.755109] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1223.759881] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1223.764759] sock_sendpage+0x10d/0x140 [ 1223.768670] pipe_to_sendpage+0x268/0x330 [ 1223.772836] ? sockfs_setattr+0x160/0x160 [ 1223.777003] ? direct_splice_actor+0x160/0x160 [ 1223.781696] ? pipe_to_sendpage+0xc/0x330 [ 1223.785872] __splice_from_pipe+0x389/0x800 [ 1223.790239] ? direct_splice_actor+0x160/0x160 [ 1223.795280] generic_splice_sendpage+0xd4/0x140 [ 1223.799972] ? __splice_from_pipe+0x800/0x800 [ 1223.804916] ? security_file_permission+0x1c0/0x220 [ 1223.810054] ? __splice_from_pipe+0x800/0x800 [ 1223.814650] __se_sys_splice+0xfe7/0x16d0 [ 1223.818821] ? ksys_write+0x1c8/0x2a0 [ 1223.822634] ? __se_sys_tee+0xb90/0xb90 [ 1223.826621] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1223.831654] ? do_syscall_64+0x21/0x620 [ 1223.835644] do_syscall_64+0xf9/0x620 [ 1223.839659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.844861] RIP: 0033:0x7ff9a60830d9 [ 1223.848588] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1223.867762] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1223.875571] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1223.882946] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 20:11:13 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1223.890315] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1223.897599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.904879] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 21) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2719, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1224.422601] FAULT_INJECTION: forcing a failure. [ 1224.422601] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.434073] CPU: 0 PID: 2993 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1224.442056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1224.451613] Call Trace: [ 1224.454231] dump_stack+0x1fc/0x2ef [ 1224.457885] should_fail.cold+0xa/0xf [ 1224.461716] ? setup_fault_attr+0x200/0x200 [ 1224.466067] ? setup_fault_attr+0x200/0x200 [ 1224.470408] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1224.475021] __should_failslab+0x115/0x180 [ 1224.479363] should_failslab+0x5/0x10 [ 1224.483183] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1224.488242] __kmalloc_node_track_caller+0x38/0x70 [ 1224.495144] __alloc_skb+0xae/0x560 [ 1224.498791] ip6_fragment+0x1583/0x34e0 [ 1224.502792] ? ip6_forward_finish+0x4b0/0x4b0 [ 1224.507391] ? check_preemption_disabled+0x41/0x280 [ 1224.512418] ? ip6_forward+0x3750/0x3750 [ 1224.516498] ip6_finish_output+0x9da/0x10f0 [ 1224.520844] ip6_output+0x205/0x770 [ 1224.524480] ? ip6_finish_output+0x10f0/0x10f0 [ 1224.530985] ? ip6_fragment+0x34e0/0x34e0 [ 1224.535153] ip6_xmit+0xdbf/0x20a0 [ 1224.538720] ? ip6_append_data+0x330/0x330 [ 1224.542978] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1224.547574] ? ac6_proc_exit+0x50/0x50 [ 1224.551471] ? rcu_nmi_exit+0xb3/0x180 [ 1224.555404] ? check_preemption_disabled+0x41/0x280 [ 1224.560448] inet6_csk_xmit+0x2fb/0x5c0 [ 1224.564455] ? inet6_csk_update_pmtu+0x180/0x180 [ 1224.569247] ? udp6_set_csum+0x299/0x590 [ 1224.573341] l2tp_xmit_skb+0xec6/0x1590 [ 1224.577338] pppol2tp_sendmsg+0x473/0x660 [ 1224.581516] ? sock_sendmsg+0x59/0x120 [ 1224.585421] ? pppol2tp_recvmsg+0x270/0x270 [ 1224.589859] sock_sendmsg+0xc3/0x120 [ 1224.593678] sock_no_sendpage+0xf5/0x140 [ 1224.597765] ? __sk_mem_schedule+0xd0/0xd0 [ 1224.602026] ? mark_held_locks+0xa6/0xf0 [ 1224.606101] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1224.610977] sock_sendpage+0x10d/0x140 [ 1224.614901] pipe_to_sendpage+0x268/0x330 [ 1224.619067] ? sockfs_setattr+0x160/0x160 [ 1224.623230] ? direct_splice_actor+0x160/0x160 [ 1224.627918] ? __splice_from_pipe+0x202/0x800 [ 1224.632523] __splice_from_pipe+0x389/0x800 [ 1224.636864] ? direct_splice_actor+0x160/0x160 [ 1224.641835] generic_splice_sendpage+0xd4/0x140 [ 1224.646618] ? __splice_from_pipe+0x800/0x800 [ 1224.651152] ? security_file_permission+0x1c0/0x220 [ 1224.656218] ? audit_kill_trees+0x230/0x230 [ 1224.661343] ? __splice_from_pipe+0x800/0x800 [ 1224.666033] __se_sys_splice+0xfe7/0x16d0 [ 1224.670394] ? ksys_write+0x1c8/0x2a0 [ 1224.674396] ? __se_sys_tee+0xb90/0xb90 [ 1224.678402] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1224.683442] ? do_syscall_64+0x21/0x620 [ 1224.687732] do_syscall_64+0xf9/0x620 [ 1224.691561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1224.696764] RIP: 0033:0x7ff9a60830d9 [ 1224.700494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 20:11:13 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1224.719400] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1224.727124] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1224.734410] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1224.741697] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1224.748983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.761330] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 22) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:14 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x9619, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xdd120000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1225.047271] FAULT_INJECTION: forcing a failure. [ 1225.047271] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.058624] CPU: 1 PID: 3039 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1225.066429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1225.075844] Call Trace: [ 1225.078451] dump_stack+0x1fc/0x2ef [ 1225.082155] should_fail.cold+0xa/0xf [ 1225.086167] ? setup_fault_attr+0x200/0x200 [ 1225.090504] ? ipv6_chk_mcast_addr+0x129/0x6c0 [ 1225.095108] __should_failslab+0x115/0x180 [ 1225.099377] should_failslab+0x5/0x10 [ 1225.103191] kmem_cache_alloc+0x3f/0x370 [ 1225.107267] skb_clone+0x151/0x3d0 [ 1225.110825] ip6_finish_output2+0x1551/0x2290 [ 1225.115332] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1225.120109] ? rcu_nmi_exit+0xb3/0x180 [ 1225.124028] ? ip6_forward_finish+0x4b0/0x4b0 [ 1225.128536] ? retint_kernel+0x2d/0x2d [ 1225.132445] ? ip6_fragment+0x191b/0x34e0 [ 1225.136609] ip6_fragment+0x1431/0x34e0 [ 1225.140612] ? ip6_forward_finish+0x4b0/0x4b0 [ 1225.145138] ? check_preemption_disabled+0x41/0x280 [ 1225.150176] ? ip6_forward+0x3750/0x3750 [ 1225.154356] ip6_finish_output+0x9da/0x10f0 [ 1225.158696] ip6_output+0x205/0x770 [ 1225.162350] ? ip6_finish_output+0x10f0/0x10f0 [ 1225.167042] ? ip6_fragment+0x34e0/0x34e0 [ 1225.171209] ? lock_is_held_type+0x17a/0x210 [ 1225.175634] ip6_xmit+0xdbf/0x20a0 [ 1225.179195] ? ip6_append_data+0x330/0x330 [ 1225.183448] ? ip6_dst_check+0x323/0x710 [ 1225.187530] ? ac6_proc_exit+0x50/0x50 [ 1225.191442] ? check_preemption_disabled+0x41/0x280 [ 1225.196497] inet6_csk_xmit+0x2fb/0x5c0 [ 1225.200494] ? inet6_csk_update_pmtu+0x180/0x180 [ 1225.205276] ? udp6_set_csum+0x299/0x590 [ 1225.209359] l2tp_xmit_skb+0xec6/0x1590 [ 1225.213362] pppol2tp_sendmsg+0x473/0x660 [ 1225.217534] ? security_socket_sendmsg+0x83/0xb0 [ 1225.222317] ? pppol2tp_recvmsg+0x270/0x270 [ 1225.226660] sock_sendmsg+0xc3/0x120 [ 1225.230393] sock_no_sendpage+0xf5/0x140 [ 1225.234470] ? __sk_mem_schedule+0xd0/0xd0 [ 1225.238720] ? rcu_nmi_exit+0xb3/0x180 [ 1225.242633] ? sockfs_setattr+0x160/0x160 [ 1225.246803] ? sock_sendpage+0x1e/0x140 [ 1225.250809] sock_sendpage+0x10d/0x140 [ 1225.254715] pipe_to_sendpage+0x268/0x330 [ 1225.258879] ? sockfs_setattr+0x160/0x160 [ 1225.263372] ? direct_splice_actor+0x160/0x160 [ 1225.267987] __splice_from_pipe+0x389/0x800 [ 1225.272421] ? direct_splice_actor+0x160/0x160 [ 1225.277027] generic_splice_sendpage+0xd4/0x140 [ 1225.281712] ? __splice_from_pipe+0x800/0x800 [ 1225.286357] ? security_file_permission+0x35/0x220 [ 1225.291309] ? security_file_permission+0x1c0/0x220 [ 1225.296343] ? __splice_from_pipe+0x800/0x800 [ 1225.300854] __se_sys_splice+0xfe7/0x16d0 [ 1225.305021] ? ksys_write+0x1c8/0x2a0 [ 1225.308832] ? __se_sys_tee+0xb90/0xb90 [ 1225.312821] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1225.317856] ? do_syscall_64+0x21/0x620 [ 1225.321862] do_syscall_64+0xf9/0x620 [ 1225.325686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.330930] RIP: 0033:0x7ff9a60830d9 20:11:14 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1225.334746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1225.355332] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1225.363850] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1225.371669] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1225.379127] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1225.386735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1225.394281] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 23) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x1996, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1225.704513] FAULT_INJECTION: forcing a failure. [ 1225.704513] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.715893] CPU: 1 PID: 3083 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1225.723716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1225.733093] Call Trace: [ 1225.735699] dump_stack+0x1fc/0x2ef [ 1225.739363] should_fail.cold+0xa/0xf [ 1225.743181] ? ip6_finish_output2+0x1176/0x2290 [ 1225.747871] ? setup_fault_attr+0x200/0x200 [ 1225.752206] ? ip6_finish_output2+0x11ae/0x2290 [ 1225.756897] ? rcu_nmi_exit+0xb3/0x180 [ 1225.760908] __should_failslab+0x115/0x180 [ 1225.765215] should_failslab+0x5/0x10 [ 1225.769060] kmem_cache_alloc_node+0x54/0x3b0 [ 1225.773677] __alloc_skb+0x71/0x560 [ 1225.777632] ip6_fragment+0x1583/0x34e0 [ 1225.781630] ? ip6_forward_finish+0x4b0/0x4b0 [ 1225.786236] ? ip6_forward+0x3750/0x3750 [ 1225.790423] ? ip6_finish_output+0x646/0x10f0 [ 1225.794943] ip6_finish_output+0x9da/0x10f0 [ 1225.799288] ip6_output+0x205/0x770 20:11:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1225.802933] ? ip6_finish_output+0x10f0/0x10f0 [ 1225.807536] ? ip6_fragment+0x34e0/0x34e0 [ 1225.811706] ip6_xmit+0xdbf/0x20a0 [ 1225.815281] ? ip6_append_data+0x330/0x330 [ 1225.819536] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1225.824145] ? ac6_proc_exit+0x50/0x50 [ 1225.828131] ? rcu_nmi_exit+0xb3/0x180 [ 1225.832057] inet6_csk_xmit+0x2fb/0x5c0 [ 1225.836054] ? inet6_csk_update_pmtu+0x180/0x180 [ 1225.840841] ? udp6_set_csum+0x299/0x590 [ 1225.845019] l2tp_xmit_skb+0xec6/0x1590 [ 1225.849029] pppol2tp_sendmsg+0x473/0x660 [ 1225.853203] ? security_socket_sendmsg+0x83/0xb0 [ 1225.858079] ? pppol2tp_recvmsg+0x270/0x270 [ 1225.862462] sock_sendmsg+0xc3/0x120 [ 1225.866193] sock_no_sendpage+0xf5/0x140 [ 1225.870277] ? __sk_mem_schedule+0xd0/0xd0 [ 1225.874531] ? rcu_nmi_exit+0xb3/0x180 [ 1225.878460] sock_sendpage+0x10d/0x140 [ 1225.882379] pipe_to_sendpage+0x268/0x330 [ 1225.886544] ? sockfs_setattr+0x160/0x160 [ 1225.890716] ? direct_splice_actor+0x160/0x160 [ 1225.895316] ? page_cache_pipe_buf_release+0xe/0x280 [ 1225.900540] ? page_cache_pipe_buf_release+0x46/0x280 [ 1225.905741] __splice_from_pipe+0x389/0x800 [ 1225.910078] ? direct_splice_actor+0x160/0x160 [ 1225.914769] generic_splice_sendpage+0xd4/0x140 [ 1225.919454] ? __splice_from_pipe+0x800/0x800 [ 1225.923972] ? retint_kernel+0x2d/0x2d [ 1225.927885] ? __splice_from_pipe+0x800/0x800 [ 1225.932391] __se_sys_splice+0xfe7/0x16d0 [ 1225.936568] ? rcu_nmi_exit+0xb3/0x180 [ 1225.940474] ? retint_kernel+0x2d/0x2d [ 1225.944374] ? __se_sys_tee+0xb90/0xb90 [ 1225.948370] ? do_syscall_64+0x4f/0x620 [ 1225.952380] do_syscall_64+0xf9/0x620 [ 1225.956200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.961425] RIP: 0033:0x7ff9a60830d9 [ 1225.965157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1225.984079] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1225.991810] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1225.999096] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1226.006367] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1226.013625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1226.021157] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 24) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x9619, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:15 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 1) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbbe07f78c5ec154aab85d701272f555aa84d107c48583a4592b993d3967dee8239ce40b12e46a0887287f67770d3ce4644cfa90282407ca51e00103c79839d11d2e64dd155077a40e52d20c97f520a734281d91b117afa0ece175e8866dc03fec92975b00f92177cde9a9bb0342ca99c924e84d2ef7542f127255c51e385fb12ac45c7f6dcbc4ea2c0432a7b796c", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1226.211328] FAULT_INJECTION: forcing a failure. [ 1226.211328] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.222737] CPU: 1 PID: 3115 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1226.230545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1226.239905] Call Trace: [ 1226.242511] dump_stack+0x1fc/0x2ef [ 1226.243492] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1226.246163] should_fail.cold+0xa/0xf [ 1226.246182] ? rcu_nmi_exit+0xb3/0x180 [ 1226.246201] ? setup_fault_attr+0x200/0x200 [ 1226.246214] ? retint_kernel+0x2d/0x2d [ 1226.246232] ? __alloc_skb+0x71/0x560 [ 1226.272196] __should_failslab+0x115/0x180 [ 1226.276488] should_failslab+0x5/0x10 [ 1226.280300] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1226.285335] __kmalloc_node_track_caller+0x38/0x70 [ 1226.290284] __alloc_skb+0xae/0x560 [ 1226.294113] ip6_fragment+0x1583/0x34e0 [ 1226.298112] ? ip6_forward_finish+0x4b0/0x4b0 [ 1226.302633] ? ip6_forward+0x3750/0x3750 [ 1226.306709] ? ip6_forward_finish+0x4b0/0x4b0 20:11:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1226.311312] ip6_finish_output+0x9da/0x10f0 [ 1226.315660] ip6_output+0x205/0x770 [ 1226.319317] ? ip6_finish_output+0x10f0/0x10f0 [ 1226.323916] ? retint_kernel+0x2d/0x2d [ 1226.327839] ? ip6_fragment+0x34e0/0x34e0 [ 1226.332018] ip6_xmit+0xdbf/0x20a0 [ 1226.335673] ? ip6_append_data+0x330/0x330 [ 1226.340015] ? ip6_dst_check+0x323/0x710 [ 1226.344091] ? ac6_proc_exit+0x50/0x50 [ 1226.348007] ? check_preemption_disabled+0x41/0x280 [ 1226.353051] inet6_csk_xmit+0x2fb/0x5c0 [ 1226.357040] ? inet6_csk_update_pmtu+0x180/0x180 [ 1226.361912] ? udp6_set_csum+0x299/0x590 [ 1226.365995] l2tp_xmit_skb+0xec6/0x1590 [ 1226.370000] pppol2tp_sendmsg+0x473/0x660 [ 1226.374254] ? pppol2tp_recvmsg+0x270/0x270 [ 1226.377450] FAULT_INJECTION: forcing a failure. [ 1226.377450] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.378586] sock_sendmsg+0xc3/0x120 [ 1226.378610] sock_no_sendpage+0xf5/0x140 [ 1226.378626] ? __sk_mem_schedule+0xd0/0xd0 [ 1226.378659] sock_sendpage+0x10d/0x140 [ 1226.378678] pipe_to_sendpage+0x268/0x330 [ 1226.378696] ? sockfs_setattr+0x160/0x160 [ 1226.414655] ? direct_splice_actor+0x160/0x160 [ 1226.419257] ? __splice_from_pipe+0x24b/0x800 [ 1226.423770] __splice_from_pipe+0x389/0x800 [ 1226.428141] ? direct_splice_actor+0x160/0x160 [ 1226.432754] generic_splice_sendpage+0xd4/0x140 [ 1226.437435] ? __splice_from_pipe+0x800/0x800 [ 1226.441951] ? security_file_permission+0x1c0/0x220 [ 1226.447074] ? __splice_from_pipe+0x800/0x800 [ 1226.451586] __se_sys_splice+0xfe7/0x16d0 [ 1226.455845] ? rcu_nmi_exit+0xb3/0x180 [ 1226.459749] ? retint_kernel+0x2d/0x2d [ 1226.463650] ? __se_sys_tee+0xb90/0xb90 [ 1226.467641] ? do_syscall_64+0x4f/0x620 [ 1226.471638] do_syscall_64+0xf9/0x620 [ 1226.475506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.480721] RIP: 0033:0x7ff9a60830d9 [ 1226.484453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1226.503361] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 20:11:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1226.511081] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1226.518367] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1226.525647] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1226.532936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1226.541327] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 [ 1226.549670] CPU: 0 PID: 3126 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1226.557485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1226.566839] Call Trace: [ 1226.569437] dump_stack+0x1fc/0x2ef [ 1226.573167] should_fail.cold+0xa/0xf [ 1226.576984] ? setup_fault_attr+0x200/0x200 [ 1226.581334] ? lock_acquire+0x170/0x3c0 [ 1226.585320] __should_failslab+0x115/0x180 [ 1226.589563] should_failslab+0x5/0x10 [ 1226.593371] kmem_cache_alloc_node+0x245/0x3b0 [ 1226.597964] __alloc_skb+0x71/0x560 [ 1226.601603] sock_wmalloc+0xd0/0x120 [ 1226.605328] pppol2tp_sendmsg+0x234/0x660 [ 1226.609481] ? security_socket_sendmsg+0x83/0xb0 [ 1226.614240] ? pppol2tp_recvmsg+0x270/0x270 [ 1226.618582] sock_sendmsg+0xc3/0x120 [ 1226.622319] sock_no_sendpage+0xf5/0x140 [ 1226.626500] ? __sk_mem_schedule+0xd0/0xd0 [ 1226.630768] ? mark_held_locks+0xa6/0xf0 [ 1226.634880] ? io_schedule_timeout+0x140/0x140 [ 1226.639560] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.644328] sock_sendpage+0x10d/0x140 [ 1226.648233] pipe_to_sendpage+0x268/0x330 [ 1226.652477] ? sockfs_setattr+0x160/0x160 [ 1226.656634] ? direct_splice_actor+0x160/0x160 [ 1226.661232] ? __splice_from_pipe+0x24b/0x800 [ 1226.665733] __splice_from_pipe+0x389/0x800 [ 1226.670087] ? direct_splice_actor+0x160/0x160 [ 1226.674679] generic_splice_sendpage+0xd4/0x140 [ 1226.679355] ? __splice_from_pipe+0x800/0x800 [ 1226.683861] ? security_file_permission+0x1c0/0x220 [ 1226.688979] ? __splice_from_pipe+0x800/0x800 [ 1226.693482] __se_sys_splice+0xfe7/0x16d0 [ 1226.697645] ? ksys_write+0x1c8/0x2a0 [ 1226.701457] ? __se_sys_tee+0xb90/0xb90 [ 1226.705445] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1226.710468] ? do_syscall_64+0x21/0x620 [ 1226.714452] do_syscall_64+0xf9/0x620 [ 1226.718264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.723455] RIP: 0033:0x7f7a132e30d9 [ 1226.727173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1226.746166] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1226.753882] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 20:11:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 25) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1226.761244] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1226.768523] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1226.775804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.783347] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 20:11:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1226.942955] FAULT_INJECTION: forcing a failure. [ 1226.942955] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.954396] CPU: 0 PID: 3153 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1226.962204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1226.971566] Call Trace: [ 1226.974173] dump_stack+0x1fc/0x2ef [ 1226.977822] should_fail.cold+0xa/0xf [ 1226.982163] ? setup_fault_attr+0x200/0x200 [ 1226.986496] ? ipv6_chk_mcast_addr+0x129/0x6c0 [ 1226.991100] __should_failslab+0x115/0x180 [ 1226.995351] should_failslab+0x5/0x10 [ 1226.999170] kmem_cache_alloc+0x3f/0x370 [ 1227.003244] skb_clone+0x151/0x3d0 [ 1227.006894] ip6_finish_output2+0x1551/0x2290 [ 1227.011421] ? ip6_copy_metadata+0x3cb/0xc10 [ 1227.015910] ? ip6_forward_finish+0x4b0/0x4b0 [ 1227.020425] ? memcpy+0x35/0x50 [ 1227.023713] ? skb_copy_bits+0x517/0x770 [ 1227.027785] ? memset+0x20/0x40 [ 1227.031079] ? __alloc_skb+0x34f/0x560 [ 1227.035159] ip6_fragment+0x1431/0x34e0 [ 1227.039151] ? ip6_forward_finish+0x4b0/0x4b0 [ 1227.043664] ? ip6_forward+0x3750/0x3750 [ 1227.047750] ip6_finish_output+0x9da/0x10f0 [ 1227.052088] ip6_output+0x205/0x770 [ 1227.055735] ? ip6_finish_output+0x10f0/0x10f0 [ 1227.060329] ? ip6_fragment+0x34e0/0x34e0 [ 1227.064498] ip6_xmit+0xdbf/0x20a0 [ 1227.068059] ? ip6_append_data+0x330/0x330 [ 1227.072315] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1227.076997] ? ac6_proc_exit+0x50/0x50 [ 1227.080911] ? rcu_nmi_exit+0xb3/0x180 [ 1227.084819] ? check_preemption_disabled+0x41/0x280 [ 1227.089954] inet6_csk_xmit+0x2fb/0x5c0 [ 1227.093949] ? inet6_csk_update_pmtu+0x180/0x180 [ 1227.098733] ? udp6_set_csum+0x299/0x590 [ 1227.102990] l2tp_xmit_skb+0xec6/0x1590 [ 1227.107176] pppol2tp_sendmsg+0x473/0x660 [ 1227.111343] ? security_socket_sendmsg+0x83/0xb0 [ 1227.116113] ? pppol2tp_recvmsg+0x270/0x270 [ 1227.120453] sock_sendmsg+0xc3/0x120 [ 1227.124182] sock_no_sendpage+0xf5/0x140 [ 1227.128269] ? __sk_mem_schedule+0xd0/0xd0 [ 1227.132534] sock_sendpage+0x10d/0x140 [ 1227.136439] pipe_to_sendpage+0x268/0x330 20:11:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 2) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:16 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1227.140592] ? sockfs_setattr+0x160/0x160 [ 1227.144930] ? direct_splice_actor+0x160/0x160 [ 1227.149527] ? page_cache_pipe_buf_release+0xe/0x280 [ 1227.154647] ? page_cache_pipe_buf_release+0x46/0x280 [ 1227.159855] __splice_from_pipe+0x389/0x800 [ 1227.164281] ? direct_splice_actor+0x160/0x160 [ 1227.168879] generic_splice_sendpage+0xd4/0x140 [ 1227.173559] ? __splice_from_pipe+0x800/0x800 [ 1227.178063] ? retint_kernel+0x2d/0x2d [ 1227.181965] ? security_file_permission+0x1c0/0x220 [ 1227.187087] ? __splice_from_pipe+0x800/0x800 20:11:16 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1227.192283] __se_sys_splice+0xfe7/0x16d0 [ 1227.196476] ? ksys_write+0x1c8/0x2a0 [ 1227.200991] ? __se_sys_tee+0xb90/0xb90 [ 1227.204984] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1227.210021] ? do_syscall_64+0x21/0x620 [ 1227.214011] do_syscall_64+0xf9/0x620 [ 1227.217832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.223035] RIP: 0033:0x7ff9a60830d9 [ 1227.226756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1227.245757] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1227.253482] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1227.260761] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1227.268042] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1227.275323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.282603] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 [ 1227.370098] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1227.444459] FAULT_INJECTION: forcing a failure. [ 1227.444459] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.456531] CPU: 0 PID: 3188 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1227.464423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1227.473782] Call Trace: [ 1227.476391] dump_stack+0x1fc/0x2ef [ 1227.480031] should_fail.cold+0xa/0xf [ 1227.483934] ? setup_fault_attr+0x200/0x200 [ 1227.488526] ? lock_acquire+0x170/0x3c0 [ 1227.492983] __should_failslab+0x115/0x180 [ 1227.497230] should_failslab+0x5/0x10 [ 1227.501065] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1227.506179] __kmalloc_node_track_caller+0x38/0x70 [ 1227.511099] __alloc_skb+0xae/0x560 [ 1227.514720] sock_wmalloc+0xd0/0x120 [ 1227.518423] pppol2tp_sendmsg+0x234/0x660 [ 1227.523257] ? security_socket_sendmsg+0x83/0xb0 [ 1227.528111] ? pppol2tp_recvmsg+0x270/0x270 [ 1227.532506] sock_sendmsg+0xc3/0x120 [ 1227.536208] sock_no_sendpage+0xf5/0x140 [ 1227.540256] ? __sk_mem_schedule+0xd0/0xd0 [ 1227.544508] sock_sendpage+0x10d/0x140 [ 1227.548394] pipe_to_sendpage+0x268/0x330 [ 1227.552554] ? sockfs_setattr+0x160/0x160 [ 1227.556705] ? direct_splice_actor+0x160/0x160 [ 1227.561287] ? lock_is_held_type+0x17a/0x210 [ 1227.565685] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1227.571038] __splice_from_pipe+0x389/0x800 [ 1227.575364] ? direct_splice_actor+0x160/0x160 [ 1227.579967] generic_splice_sendpage+0xd4/0x140 [ 1227.584624] ? __splice_from_pipe+0x800/0x800 [ 1227.589103] ? retint_kernel+0x2d/0x2d [ 1227.592991] ? security_file_permission+0x1c0/0x220 [ 1227.597996] ? __splice_from_pipe+0x800/0x800 [ 1227.602476] __se_sys_splice+0xfe7/0x16d0 [ 1227.606640] ? ksys_write+0x1c8/0x2a0 [ 1227.610441] ? __se_sys_tee+0xb90/0xb90 [ 1227.614405] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1227.619534] ? do_syscall_64+0x21/0x620 [ 1227.623602] do_syscall_64+0xf9/0x620 [ 1227.627410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.632771] RIP: 0033:0x7f7a132e30d9 [ 1227.636523] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1227.655409] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1227.663267] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1227.670525] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1227.677806] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1227.685085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 20:11:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 26) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1227.692342] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 20:11:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 3) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:17 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="294f00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1227.829378] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 1227.880673] FAULT_INJECTION: forcing a failure. [ 1227.880673] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.892063] CPU: 0 PID: 3205 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1227.899900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1227.909612] Call Trace: [ 1227.912226] dump_stack+0x1fc/0x2ef [ 1227.915885] should_fail.cold+0xa/0xf [ 1227.919703] ? setup_fault_attr+0x200/0x200 [ 1227.924041] ? trace_hardirqs_on_thunk+0x1a/0x1c 20:11:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1227.929079] __should_failslab+0x115/0x180 [ 1227.933355] should_failslab+0x5/0x10 [ 1227.937165] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1227.942201] __kmalloc_node_track_caller+0x38/0x70 [ 1227.947153] pskb_expand_head+0x159/0xf20 [ 1227.951330] ? l2tp_xmit_skb+0x1d8/0x1590 [ 1227.955573] l2tp_xmit_skb+0xb6c/0x1590 [ 1227.959671] pppol2tp_sendmsg+0x473/0x660 [ 1227.963848] ? pppol2tp_recvmsg+0x270/0x270 [ 1227.968188] sock_sendmsg+0xc3/0x120 [ 1227.971932] sock_no_sendpage+0xf5/0x140 [ 1227.976004] ? __sk_mem_schedule+0xd0/0xd0 [ 1227.980261] ? rcu_nmi_exit+0xb3/0x180 [ 1227.982759] FAULT_INJECTION: forcing a failure. [ 1227.982759] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.984254] sock_sendpage+0x10d/0x140 [ 1227.984279] pipe_to_sendpage+0x268/0x330 [ 1228.003566] ? sockfs_setattr+0x160/0x160 [ 1228.007727] ? direct_splice_actor+0x160/0x160 [ 1228.012552] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1228.018101] __splice_from_pipe+0x389/0x800 [ 1228.022432] ? direct_splice_actor+0x160/0x160 [ 1228.027198] generic_splice_sendpage+0xd4/0x140 [ 1228.032052] ? __splice_from_pipe+0x800/0x800 [ 1228.036555] ? security_file_permission+0x1c0/0x220 [ 1228.041574] ? __splice_from_pipe+0x800/0x800 [ 1228.046070] __se_sys_splice+0xfe7/0x16d0 [ 1228.050227] ? rcu_nmi_exit+0xb3/0x180 [ 1228.054116] ? retint_kernel+0x2d/0x2d [ 1228.058008] ? __se_sys_tee+0xb90/0xb90 [ 1228.062203] ? do_syscall_64+0xbf/0x620 [ 1228.066179] do_syscall_64+0xf9/0x620 [ 1228.069990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1228.075178] RIP: 0033:0x7f7a132e30d9 [ 1228.078899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1228.098033] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1228.105742] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1228.113020] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1228.120312] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1228.127579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.134847] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 [ 1228.142225] CPU: 1 PID: 3210 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1228.150470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1228.161389] Call Trace: [ 1228.163989] dump_stack+0x1fc/0x2ef [ 1228.167635] should_fail.cold+0xa/0xf [ 1228.171444] ? ip6_finish_output2+0x1176/0x2290 [ 1228.176130] ? setup_fault_attr+0x200/0x200 [ 1228.180466] ? ip6_finish_output2+0x11ae/0x2290 [ 1228.185169] __should_failslab+0x115/0x180 [ 1228.189444] should_failslab+0x5/0x10 [ 1228.193289] kmem_cache_alloc_node+0x54/0x3b0 [ 1228.197815] __alloc_skb+0x71/0x560 [ 1228.201469] ip6_fragment+0x1583/0x34e0 [ 1228.205559] ? ip6_forward_finish+0x4b0/0x4b0 [ 1228.210075] ? ip6_forward+0x3750/0x3750 [ 1228.214150] ? ip6_finish_output+0x741/0x10f0 [ 1228.218660] ip6_finish_output+0x9da/0x10f0 [ 1228.223177] ip6_output+0x205/0x770 [ 1228.226998] ? ip6_finish_output+0x10f0/0x10f0 [ 1228.231677] ? ip6_fragment+0x34e0/0x34e0 [ 1228.235842] ip6_xmit+0xdbf/0x20a0 [ 1228.239409] ? ip6_append_data+0x330/0x330 [ 1228.243655] ? ip6_dst_check+0x323/0x710 [ 1228.247814] ? ac6_proc_exit+0x50/0x50 [ 1228.251721] ? check_preemption_disabled+0x41/0x280 [ 1228.256765] inet6_csk_xmit+0x2fb/0x5c0 [ 1228.260752] ? inet6_csk_update_pmtu+0x180/0x180 [ 1228.265530] ? udp6_set_csum+0x299/0x590 [ 1228.269607] l2tp_xmit_skb+0xec6/0x1590 [ 1228.273695] pppol2tp_sendmsg+0x473/0x660 [ 1228.278207] ? pppol2tp_recvmsg+0x270/0x270 [ 1228.282549] sock_sendmsg+0xc3/0x120 [ 1228.286277] sock_no_sendpage+0xf5/0x140 [ 1228.290364] ? __sk_mem_schedule+0xd0/0xd0 [ 1228.294725] ? mark_held_locks+0xa6/0xf0 [ 1228.298878] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.303652] sock_sendpage+0x10d/0x140 [ 1228.307550] pipe_to_sendpage+0x268/0x330 [ 1228.311796] ? sockfs_setattr+0x160/0x160 [ 1228.315962] ? direct_splice_actor+0x160/0x160 [ 1228.320567] __splice_from_pipe+0x389/0x800 [ 1228.324898] ? direct_splice_actor+0x160/0x160 [ 1228.329509] generic_splice_sendpage+0xd4/0x140 [ 1228.334361] ? __splice_from_pipe+0x800/0x800 [ 1228.338878] ? __splice_from_pipe+0x800/0x800 [ 1228.343385] __se_sys_splice+0xfe7/0x16d0 [ 1228.347551] ? ksys_write+0x1c8/0x2a0 [ 1228.351359] ? __se_sys_tee+0xb90/0xb90 [ 1228.355357] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1228.360387] ? do_syscall_64+0x21/0x620 [ 1228.364372] do_syscall_64+0xf9/0x620 [ 1228.368357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1228.373701] RIP: 0033:0x7ff9a60830d9 [ 1228.377420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1228.396328] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1228.404193] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1228.411471] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1228.418750] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1228.426037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1228.433327] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) (fail_nth: 27) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x27190000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:17 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 4) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1228.667723] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1228.760690] FAULT_INJECTION: forcing a failure. [ 1228.760690] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.772060] CPU: 0 PID: 3244 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1228.773789] FAULT_INJECTION: forcing a failure. [ 1228.773789] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.780012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1228.780019] Call Trace: [ 1228.780042] dump_stack+0x1fc/0x2ef [ 1228.780063] should_fail.cold+0xa/0xf [ 1228.780090] ? setup_fault_attr+0x200/0x200 [ 1228.815343] ? __lock_acquire+0x6de/0x3ff0 [ 1228.819588] __should_failslab+0x115/0x180 [ 1228.823829] should_failslab+0x5/0x10 [ 1228.827727] kmem_cache_alloc+0x3f/0x370 [ 1228.831791] skb_clone+0x151/0x3d0 [ 1228.835336] skb_realloc_headroom+0x82/0x110 [ 1228.839754] ip6_xmit+0x173e/0x20a0 [ 1228.843415] ? ip6_append_data+0x330/0x330 [ 1228.847669] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1228.852259] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.857021] ? rcu_nmi_exit+0xb3/0x180 [ 1228.860911] ? retint_kernel+0x2d/0x2d [ 1228.864806] ? check_preemption_disabled+0x41/0x280 [ 1228.869922] inet6_csk_xmit+0x2fb/0x5c0 [ 1228.873901] ? inet6_csk_update_pmtu+0x180/0x180 [ 1228.878763] ? udp6_set_csum+0x299/0x590 [ 1228.882831] l2tp_xmit_skb+0xec6/0x1590 [ 1228.886818] pppol2tp_sendmsg+0x473/0x660 [ 1228.890979] ? security_socket_sendmsg+0x83/0xb0 [ 1228.895741] ? pppol2tp_recvmsg+0x270/0x270 [ 1228.900075] sock_sendmsg+0xc3/0x120 [ 1228.903792] sock_no_sendpage+0xf5/0x140 [ 1228.907868] ? __sk_mem_schedule+0xd0/0xd0 [ 1228.912114] ? mark_held_locks+0xa6/0xf0 [ 1228.916174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.920933] sock_sendpage+0x10d/0x140 [ 1228.924848] pipe_to_sendpage+0x268/0x330 [ 1228.929011] ? sockfs_setattr+0x160/0x160 [ 1228.933170] ? direct_splice_actor+0x160/0x160 [ 1228.937756] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1228.943214] __splice_from_pipe+0x389/0x800 [ 1228.947543] ? direct_splice_actor+0x160/0x160 [ 1228.952128] generic_splice_sendpage+0xd4/0x140 [ 1228.956823] ? __splice_from_pipe+0x800/0x800 [ 1228.961497] ? retint_kernel+0x2d/0x2d [ 1228.965391] ? security_file_permission+0x1c0/0x220 [ 1228.971714] ? __splice_from_pipe+0x800/0x800 [ 1228.976305] __se_sys_splice+0xfe7/0x16d0 [ 1228.980471] ? ksys_write+0x1c8/0x2a0 [ 1228.984285] ? __se_sys_tee+0xb90/0xb90 [ 1228.988270] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1228.993289] ? do_syscall_64+0x21/0x620 [ 1228.997271] do_syscall_64+0xf9/0x620 [ 1229.001080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.006265] RIP: 0033:0x7f7a132e30d9 [ 1229.009981] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1229.028976] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1229.036890] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1229.044163] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1229.051432] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1229.058719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.065988] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 [ 1229.073471] CPU: 1 PID: 3249 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1229.081275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1229.090646] Call Trace: [ 1229.093243] dump_stack+0x1fc/0x2ef [ 1229.096880] should_fail.cold+0xa/0xf [ 1229.100689] ? setup_fault_attr+0x200/0x200 [ 1229.105018] ? retint_kernel+0x2d/0x2d [ 1229.109002] __should_failslab+0x115/0x180 [ 1229.113244] should_failslab+0x5/0x10 [ 1229.117061] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1229.122087] __kmalloc_node_track_caller+0x38/0x70 [ 1229.127109] __alloc_skb+0xae/0x560 [ 1229.130744] ip6_fragment+0x1583/0x34e0 [ 1229.134740] ? ip6_forward_finish+0x4b0/0x4b0 [ 1229.139261] ? check_preemption_disabled+0x41/0x280 [ 1229.144292] ? ip6_forward+0x3750/0x3750 [ 1229.148375] ip6_finish_output+0x9da/0x10f0 [ 1229.152716] ip6_output+0x205/0x770 [ 1229.156498] ? ip6_finish_output+0x10f0/0x10f0 [ 1229.161102] ? check_preemption_disabled+0x33/0x280 [ 1229.166140] ? check_preemption_disabled+0x3c/0x280 [ 1229.171257] ? ip6_fragment+0x34e0/0x34e0 [ 1229.175425] ip6_xmit+0xdbf/0x20a0 [ 1229.178978] ? ip6_append_data+0x330/0x330 [ 1229.183227] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1229.187818] ? ac6_proc_exit+0x50/0x50 [ 1229.192252] ? rcu_nmi_exit+0xb3/0x180 [ 1229.196160] ? check_preemption_disabled+0x41/0x280 [ 1229.201198] inet6_csk_xmit+0x2fb/0x5c0 [ 1229.205273] ? inet6_csk_update_pmtu+0x180/0x180 [ 1229.210053] ? udp6_set_csum+0x2b4/0x590 [ 1229.214133] l2tp_xmit_skb+0xec6/0x1590 [ 1229.218130] pppol2tp_sendmsg+0x473/0x660 [ 1229.222302] ? security_socket_sendmsg+0x83/0xb0 [ 1229.227073] ? pppol2tp_recvmsg+0x270/0x270 [ 1229.231427] sock_sendmsg+0xc3/0x120 [ 1229.235148] sock_no_sendpage+0xf5/0x140 [ 1229.239221] ? __sk_mem_schedule+0xd0/0xd0 [ 1229.243464] ? rcu_nmi_exit+0xb3/0x180 [ 1229.247372] sock_sendpage+0x10d/0x140 [ 1229.251283] pipe_to_sendpage+0x268/0x330 [ 1229.255448] ? sockfs_setattr+0x160/0x160 [ 1229.259626] ? direct_splice_actor+0x160/0x160 [ 1229.264305] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1229.269686] __splice_from_pipe+0x389/0x800 [ 1229.274017] ? direct_splice_actor+0x160/0x160 [ 1229.278612] generic_splice_sendpage+0xd4/0x140 [ 1229.283285] ? __splice_from_pipe+0x800/0x800 [ 1229.287796] ? security_file_permission+0x1c0/0x220 [ 1229.292833] ? __splice_from_pipe+0x800/0x800 [ 1229.297337] __se_sys_splice+0xfe7/0x16d0 [ 1229.301498] ? ksys_write+0x1c8/0x2a0 [ 1229.305299] ? __se_sys_tee+0xb90/0xb90 [ 1229.309541] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1229.314565] ? do_syscall_64+0x21/0x620 [ 1229.318554] do_syscall_64+0xf9/0x620 [ 1229.322375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.327647] RIP: 0033:0x7ff9a60830d9 [ 1229.331396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1229.350568] RSP: 002b:00007ff9a45f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 20:11:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:18 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1229.358287] RAX: ffffffffffffffda RBX: 00007ff9a61a2f80 RCX: 00007ff9a60830d9 [ 1229.365566] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 1229.372848] RBP: 00007ff9a45f51d0 R08: 0000000100000002 R09: 0000000000000000 [ 1229.380124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.387581] R13: 00007fff4482acbf R14: 00007ff9a45f5300 R15: 0000000000022000 20:11:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="161226b49742935dac042aae4ad5dd8eb82604cd8d8c051821aaf0f2d242542fcdb1e70b17cb029444c3f1516a4700f761f66ce0fa92a4afc201cd2842521c0d20baa1d3f61cdb6317c770d74a1484c9740200000000000000d43cbd10968a714d3006f93bb65f0fcf8709600b94006113825a0530af1e337b285f4ed7d156b2446537012dfda1d343ae643c2ef3487a6e60d40d634cb935f38495a727c1f2207a6d7a80fab012dd2e3ef138d683a07a6af972b08dd8012ba450c59b511f845989ce6bd5f8d2f11a05408e0ab8b573b2dfbe2c0d310200000000000000d438afe387162391e8e84eca6f5af03a36900000000000006d47c108f0cb196f9b667aa132c07100f71f3e675724583cd0eb5d4292e680aa197182099d1015ee18ad4871552ae681d7950a4238b544d436dbfd901de04aca1f6b60f5d9d650443f1c10530ebba54b8c87207df9d1d31fd384c0022ef6aff1df6329c6e1c88f239e4ce70c34ab", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 5) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbbe07f78c5ec154aab85d701272f555aa84d107c48583a4592b993d3967dee8239ce40b12e46a0887287f67770d3ce4644cfa90282407ca51e00103c79839d11d2e64dd155077a40e52d20c97f520a734281d91b117afa0ece175e8866dc03fec92975b00f92177cde9a9bb0342ca99c924e84d2ef7542f127255c51e385fb12ac45c7f6dcbc4ea2c0432a7b796c", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) [ 1229.513633] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:18 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1229.597262] FAULT_INJECTION: forcing a failure. [ 1229.597262] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.608745] CPU: 1 PID: 3271 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1229.616550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1229.625947] Call Trace: [ 1229.628551] dump_stack+0x1fc/0x2ef [ 1229.632207] should_fail.cold+0xa/0xf [ 1229.636028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1229.640891] ? setup_fault_attr+0x200/0x200 [ 1229.645410] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1229.650004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1229.654778] __should_failslab+0x115/0x180 [ 1229.659029] should_failslab+0x5/0x10 [ 1229.663107] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 1229.668146] __kmalloc_node_track_caller+0x38/0x70 [ 1229.673099] pskb_expand_head+0x159/0xf20 [ 1229.677440] ? skb_clone+0x1b2/0x3d0 [ 1229.681171] skb_realloc_headroom+0xa4/0x110 [ 1229.685599] ip6_xmit+0x173e/0x20a0 [ 1229.689253] ? ip6_append_data+0x330/0x330 [ 1229.693510] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1229.698112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1229.702887] ? rcu_nmi_exit+0xb3/0x180 [ 1229.706807] ? check_preemption_disabled+0x41/0x280 [ 1229.711930] inet6_csk_xmit+0x2fb/0x5c0 [ 1229.715916] ? inet6_csk_update_pmtu+0x180/0x180 [ 1229.720701] ? l2tp_xmit_skb+0xa44/0x1590 [ 1229.724871] l2tp_xmit_skb+0xec6/0x1590 [ 1229.728959] pppol2tp_sendmsg+0x473/0x660 [ 1229.733302] ? security_socket_sendmsg+0x83/0xb0 [ 1229.738074] ? pppol2tp_recvmsg+0x270/0x270 [ 1229.742406] sock_sendmsg+0xc3/0x120 20:11:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1229.746130] sock_no_sendpage+0xf5/0x140 [ 1229.750205] ? __sk_mem_schedule+0xd0/0xd0 [ 1229.754473] sock_sendpage+0x10d/0x140 [ 1229.758493] pipe_to_sendpage+0x268/0x330 [ 1229.762650] ? sockfs_setattr+0x160/0x160 [ 1229.766823] ? direct_splice_actor+0x160/0x160 [ 1229.771425] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1229.776819] __splice_from_pipe+0x389/0x800 [ 1229.781166] ? direct_splice_actor+0x160/0x160 [ 1229.785960] generic_splice_sendpage+0xd4/0x140 [ 1229.790651] ? __splice_from_pipe+0x800/0x800 [ 1229.795168] ? security_file_permission+0x1c0/0x220 [ 1229.800204] ? __splice_from_pipe+0x800/0x800 [ 1229.804712] __se_sys_splice+0xfe7/0x16d0 [ 1229.808879] ? ksys_write+0x1c8/0x2a0 [ 1229.813641] ? __se_sys_tee+0xb90/0xb90 [ 1229.817634] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1229.822671] ? do_syscall_64+0x21/0x620 [ 1229.826662] do_syscall_64+0xf9/0x620 [ 1229.830480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.835684] RIP: 0033:0x7f7a132e30d9 [ 1229.839503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1229.858415] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1229.866213] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1229.873492] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1229.880772] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1229.888056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.895336] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 20:11:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0xe80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:19 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df541252c456ebc9d1942f8caa77d5a20049bc224ef2"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) (fail_nth: 6) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x96190000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:19 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) [ 1230.278311] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:19 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1230.471473] FAULT_INJECTION: forcing a failure. [ 1230.471473] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.483314] CPU: 1 PID: 3316 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1230.491115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1230.500656] Call Trace: [ 1230.503272] dump_stack+0x1fc/0x2ef [ 1230.506919] should_fail.cold+0xa/0xf [ 1230.510738] ? setup_fault_attr+0x200/0x200 [ 1230.515263] ? rcu_nmi_exit+0xb3/0x180 [ 1230.519347] __should_failslab+0x115/0x180 [ 1230.523611] should_failslab+0x5/0x10 [ 1230.527422] kmem_cache_alloc_node+0x54/0x3b0 [ 1230.531934] __alloc_skb+0x71/0x560 [ 1230.535579] ip6_fragment+0x1583/0x34e0 [ 1230.539570] ? ip6_forward_finish+0x4b0/0x4b0 [ 1230.544083] ? check_preemption_disabled+0x41/0x280 [ 1230.549190] ? ip6_forward+0x3750/0x3750 [ 1230.553267] ip6_finish_output+0x9da/0x10f0 [ 1230.557698] ip6_output+0x205/0x770 [ 1230.561331] ? ip6_finish_output+0x10f0/0x10f0 [ 1230.565931] ? ip6_fragment+0x34e0/0x34e0 [ 1230.570188] ip6_xmit+0xdbf/0x20a0 [ 1230.573839] ? ip6_append_data+0x330/0x330 [ 1230.578083] ? lockdep_hardirqs_on+0x288/0x5c0 [ 1230.582682] ? ac6_proc_exit+0x50/0x50 [ 1230.586586] ? rcu_nmi_exit+0xb3/0x180 [ 1230.590490] ? check_preemption_disabled+0x41/0x280 [ 1230.595534] inet6_csk_xmit+0x2fb/0x5c0 [ 1230.599545] ? inet6_csk_update_pmtu+0x180/0x180 [ 1230.604339] l2tp_xmit_skb+0xec6/0x1590 [ 1230.609727] pppol2tp_sendmsg+0x473/0x660 [ 1230.614092] ? security_socket_sendmsg+0x83/0xb0 [ 1230.618859] ? pppol2tp_recvmsg+0x270/0x270 [ 1230.623192] sock_sendmsg+0xc3/0x120 [ 1230.626914] sock_no_sendpage+0xf5/0x140 [ 1230.631002] ? __sk_mem_schedule+0xd0/0xd0 [ 1230.635604] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1230.640294] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1230.645110] sock_sendpage+0x10d/0x140 [ 1230.649065] pipe_to_sendpage+0x268/0x330 [ 1230.653221] ? sockfs_setattr+0x160/0x160 [ 1230.657380] ? direct_splice_actor+0x160/0x160 [ 1230.661975] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 1230.667346] __splice_from_pipe+0x389/0x800 [ 1230.671688] ? direct_splice_actor+0x160/0x160 [ 1230.676279] generic_splice_sendpage+0xd4/0x140 [ 1230.680952] ? __splice_from_pipe+0x800/0x800 [ 1230.685469] ? __splice_from_pipe+0x800/0x800 [ 1230.689968] __se_sys_splice+0xfe7/0x16d0 [ 1230.694129] ? ksys_write+0x1c8/0x2a0 [ 1230.697932] ? __se_sys_tee+0xb90/0xb90 [ 1230.701914] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1230.706934] ? do_syscall_64+0x21/0x620 [ 1230.710912] do_syscall_64+0xf9/0x620 [ 1230.714723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.720850] RIP: 0033:0x7f7a132e30d9 [ 1230.724568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1230.744174] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1230.751887] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1230.759159] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1230.766437] RBP: 00007f7a118551d0 R08: 0000000100000002 R09: 0000000000000000 [ 1230.773706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.781004] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000004, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295a00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000005, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1231.397068] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295b00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:20 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295c00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0xe80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000009, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295d00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295e00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) [ 1231.839693] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="295f00002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x1000001f4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) [ 1232.119095] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296100002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000004, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="0c00018005000300040000000c000180050008737c5a00000c00018005000600060000000c000180060002000a0000000c0001800500030002000000100001800c00048008000200110000000c0001800500030024000000100001800c0004800800020011000000aa09c433ecd5ada955143f155c109e55b30e4772110ad60597d6263237d1ea5934f0a4774dbbe07f78c5ec154aab85d701272f555aa84d107c48583a4592b993d3967dee8239ce40b12e46a0887287f67770d3ce4644cfa90282407ca51e00103c79839d11d2e64dd155077a40e52d20c97f520a734281d91b117afa0ece175e8866dc03fec92975b00f92177cde9a9bb0342ca99c924e84d2ef7542f127255c51e385fb12ac45c7f6dcbc4ea2c0432a7b796c", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xb, 0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296200002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x1000003e8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1232.594688] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:21 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296300002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296400002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xb, 0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000005, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296500002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x10001a000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) [ 1233.052518] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xb, 0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296600002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(r1, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9caf877d3d19e892380de9f7214b59cc1d97b755bc7", @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRESOCT], 0x3f, 0x3) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev, 0x6}, 0x1c) write$bt_hci(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="61ba05000e194e06000000400000000000ee5a834a150dc6450fd17fd700afea8d8a0da3dedbdddabcdd637100007ebaa4dd7cece22cb9f1fed53cd94bf97cd3f65d6af327359b15cddaed7d453d98a8af8cddae49b515f37f8926d88041c1daf5ed0655a099720200000090cb831a26c8ddff8ec708a0045cdb235c91e545035754e625896b530ae674b9b58fbf92eda9209e6129ce87c21ebba32fdcec4d680b412c87bc49c6a7549073540800b7fadbde8802fc3119e53041ed2b8134cdffff660518ca00000000a3a1c785c2950345000000004826e967b4d2897a2667d127e4f61fa0256933f31b28d95acffa1c0a7391d89e37939080b0c705d4d404073a6edd8efe894735712042e15b1174cd56ded3c8eb239421e89de81540b69006670ec2338b304549637b976ce1d968eb9e1a93981a02da17b2c09396bd392a01091afe26f81f7435ea50e77e6527871362ed5c455a666744bffcdf8919aee8402717d28ea6950397d31072172f69bcb5a842fac586f5ebd5e3d90b15219c5511a1e681021d41e5765c9f64826900165ac4834d823fa8392083080abc68440cd07c0f91e28afc88776ab61f8ccb05093883a96c14bdb9255af08bbcd550eb00911dff440571bf710d59390fdfa112ba8221a600b733ef5eb7d91acffe9e26add4211ab2d60891edcc6dfd63495f3681f418a084ba0c67e74a2b8490a37613a5862da4c8ca02ea5f67d53f28d33e749418fda3ca0a801f4b2d42d2178d1563ee2aaae58d519b00b3956dd4d3b0c4c35d0c7a9069d764ec33f1fe6bc61d1d8301763cffd18846b97d64ea9021e996138491db237a815465b9fb5229690513cee08f987d1f8654aa763bf729864be64826fd55ce7a1ad2df541252c456ebc9d1942f8caa77d5a20049bc224ef2"], 0x6) splice(r2, 0x0, r3, 0x0, 0x100000009, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="8c010400000007000000700022c8727c061d20fedbdf25070000010007f611fcf004847a867a08288f218f096be54c335c7b0138f9fe39c5c9dfde658344281f56b0775006ca9210e54e5ca484d3e446a38b2c72408f3fc25d8bd3449f4ad434ba2426813748ddd4029dc23a4d721f22ca9f5ec7f1cb1759c6bc4eb19cfe717d3060f4aa5e137bd3d5b79bd090461e030af0ec6e00"/158, @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRES8=r7, @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296700002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xb, 0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1233.504362] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 20:11:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2df}, 0x0, 0x2000000000000000, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1f5810, r0, 0x614c5000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x8000, 0x72}, 0x2c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0x10, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10, 0x0) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008800) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="93c2bbe4b3a5cccf289a21b7bee9504b01b9a922e6c637e7288341aa7b46b5b373946f1c8801451c2197318290b66c73e18e19dba56031e9d681c1bc242c814b90d9", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r5, @ANYRESOCT], 0x3f, 0x3) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b00050000", 0x28}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4080) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296800002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="296900002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) 20:11:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) 20:11:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{0xb, 0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d45c928a0200"}]}, 0x40}}, 0x0) [ 1233.814944] ------------[ cut here ]------------ [ 1233.820522] WARNING: CPU: 0 PID: 3523 at net/mac80211/rx.c:4592 ieee80211_rx_napi.cold+0x11/0x80 [ 1233.829629] Kernel panic - not syncing: panic_on_warn set ... [ 1233.829629] [ 1233.837094] CPU: 0 PID: 3523 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1233.845418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1233.854957] Call Trace: [ 1233.857542] [ 1233.859710] dump_stack+0x1fc/0x2ef [ 1233.863354] panic+0x26a/0x50e [ 1233.866560] ? __warn_printk+0xf3/0xf3 [ 1233.870457] ? ieee80211_rx_napi.cold+0x11/0x80 [ 1233.875131] ? __probe_kernel_read+0x130/0x1b0 [ 1233.879723] ? __warn.cold+0x5/0x5a [ 1233.883614] ? __warn+0xe4/0x200 [ 1233.887253] ? ieee80211_rx_napi.cold+0x11/0x80 [ 1233.892015] __warn.cold+0x20/0x5a [ 1233.895574] ? ieee80211_rx_napi.cold+0x11/0x80 [ 1233.900260] report_bug+0x262/0x2b0 [ 1233.903912] do_error_trap+0x1d7/0x310 [ 1233.907813] ? math_error+0x310/0x310 [ 1233.911621] ? __irq_work_queue_local+0x101/0x160 [ 1233.916478] ? irq_work_queue+0x29/0x80 [ 1233.920461] ? error_entry+0x72/0xd0 [ 1233.924184] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1233.929215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1233.934066] invalid_op+0x14/0x20 [ 1233.937640] RIP: 0010:ieee80211_rx_napi.cold+0x11/0x80 [ 1233.942918] Code: ff e8 c4 15 4e f9 48 c7 c7 c0 c0 67 89 e8 23 47 df ff 0f 0b e9 02 0c 8c ff e8 ac 15 4e f9 48 c7 c7 c0 c0 67 89 e8 0b 47 df ff <0f> 0b e9 64 82 8c ff e8 94 15 4e f9 48 c7 c7 c0 c0 67 89 e8 f3 46 [ 1233.961920] RSP: 0018:ffff8880ba007d00 EFLAGS: 00010282 [ 1233.967467] RAX: 0000000000000024 RBX: ffff888044253308 RCX: 0000000000000000 [ 1233.974843] RDX: 0000000000000100 RSI: ffffffff814dff01 RDI: ffffed1017400f92 [ 1233.982481] RBP: 0000000000000000 R08: 0000000000000024 R09: 0000000000000000 [ 1233.990551] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88809a5e6840 [ 1233.997835] R13: ffff8880442519c0 R14: ffff8880442519c0 R15: ffff88809a5e6840 [ 1234.005391] ? vprintk_func+0x81/0x180 [ 1234.009313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1234.014084] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1234.018859] ? ieee80211_prepare_and_rx_handle+0x6790/0x6790 [ 1234.024852] ? retint_kernel+0x2d/0x2d [ 1234.028768] ? _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 1234.033976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1234.039204] ieee80211_tasklet_handler+0x101/0x160 [ 1234.044333] tasklet_action_common.constprop.0+0x265/0x360 [ 1234.049985] __do_softirq+0x265/0x980 [ 1234.053806] irq_exit+0x215/0x260 [ 1234.057350] smp_apic_timer_interrupt+0x136/0x550 [ 1234.062221] apic_timer_interrupt+0xf/0x20 [ 1234.066465] [ 1234.068727] RIP: 0010:__local_bh_enable_ip+0x18d/0x270 [ 1234.074113] Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 dd 00 00 00 48 83 3d c8 5f b8 08 00 0f 84 8d 00 00 00 fb 66 0f 1f 44 00 00 <65> 8b 05 6c bc c8 7e 85 c0 74 7d 5b 5d 41 5c c3 80 3d f3 87 d5 09 [ 1234.093026] RSP: 0018:ffff8880b4e7f9d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 1234.100743] RAX: 1ffffffff13e3053 RBX: 0000000000000200 RCX: 1ffff110166ebd7d [ 1234.108134] RDX: dffffc0000000000 RSI: ffff8880b375ebc8 RDI: ffff8880b375ebc4 [ 1234.115510] RBP: ffffffff87635012 R08: 0000000000000001 R09: 0000000000000000 [ 1234.122785] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b375e340 [ 1234.130062] R13: 0000000000001000 R14: ffff88809a5e6d40 R15: ffff88809b3a0d1e [ 1234.137359] ? pppol2tp_sendmsg+0x462/0x660 [ 1234.141713] ? __local_bh_enable_ip+0x159/0x270 [ 1234.146385] pppol2tp_sendmsg+0x489/0x660 [ 1234.150546] ? security_socket_sendmsg+0x83/0xb0 [ 1234.155307] ? pppol2tp_recvmsg+0x270/0x270 [ 1234.159671] sock_sendmsg+0xc3/0x120 [ 1234.163393] sock_no_sendpage+0xf5/0x140 [ 1234.167459] ? __sk_mem_schedule+0xd0/0xd0 [ 1234.171708] ? retint_kernel+0x2d/0x2d [ 1234.175614] sock_sendpage+0x10d/0x140 [ 1234.179599] pipe_to_sendpage+0x268/0x330 [ 1234.183944] ? sockfs_setattr+0x160/0x160 [ 1234.188660] ? direct_splice_actor+0x160/0x160 [ 1234.193259] ? page_cache_pipe_buf_release+0xbf/0x280 [ 1234.198718] __splice_from_pipe+0x389/0x800 [ 1234.203061] ? direct_splice_actor+0x160/0x160 [ 1234.207664] generic_splice_sendpage+0xd4/0x140 [ 1234.212345] ? __splice_from_pipe+0x800/0x800 [ 1234.216868] ? security_file_permission+0x1c0/0x220 [ 1234.222005] ? __splice_from_pipe+0x800/0x800 [ 1234.226503] __se_sys_splice+0xfe7/0x16d0 [ 1234.230777] ? do_futex+0x1880/0x1880 [ 1234.234598] ? __se_sys_tee+0xb90/0xb90 [ 1234.238590] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1234.243645] ? do_syscall_64+0x21/0x620 [ 1234.247809] do_syscall_64+0xf9/0x620 [ 1234.251626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.256824] RIP: 0033:0x7f7a132e30d9 [ 1234.260547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1234.279911] RSP: 002b:00007f7a11855168 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1234.287837] RAX: ffffffffffffffda RBX: 00007f7a13402f80 RCX: 00007f7a132e30d9 [ 1234.295361] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000006 [ 1234.302634] RBP: 00007f7a1333eae9 R08: 0000000100000009 R09: 0000000000000000 [ 1234.309975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.317411] R13: 00007ffdad0a2b8f R14: 00007f7a11855300 R15: 0000000000022000 [ 1234.325337] Kernel Offset: disabled [ 1234.328967] Rebooting in 86400 seconds..