000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40810)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev}]}]}, 0x2c}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, &(0x7f0000000040)=0xffffffffffffffeb)

18:27:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000840}, 0x8000)

18:27:13 executing program 2:
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r0, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x457dbe36}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x38}}, 0x0)

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda97}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc091}, 0x4000000) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
syz_open_dev$loop(&(0x7f00000007c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000440)=0x4)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000480)={0x101, 0xffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async)
syz_open_dev$loop(&(0x7f00000007c0), 0x0, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000440)=0x4) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000480)={0x101, 0xffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)

18:27:13 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1)
nanosleep(&(0x7f00000000c0), &(0x7f0000000100))
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080))
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)

18:27:13 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1)
nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) (async)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

18:27:13 executing program 2:
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r0, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x457dbe36}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x38}}, 0x0)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, r0, 0x2, 0x8000000, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63d65742}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}}, 0x0)

18:27:13 executing program 5:
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x3b00496be983de72, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x80)

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0)

18:27:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000840}, 0x8000)

18:27:13 executing program 5:
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x3b00496be983de72, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x80)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, r0, 0x2, 0x8000000, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63d65742}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, r0, 0x2, 0x8000000, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63d65742}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}}, 0x0) (async)

18:27:13 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) (async)
nanosleep(&(0x7f00000000c0), &(0x7f0000000100))
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14)

18:27:13 executing program 2:
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r0, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x457dbe36}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x38}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r0, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x457dbe36}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x38}}, 0x0) (async)

18:27:13 executing program 5:
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x3b00496be983de72, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x80)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) (async)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x3b00496be983de72, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x80) (async)

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc4d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000811}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000))
getsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, &(0x7f0000000080))

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd4, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x2001c000)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc4d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000811}, 0x10) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000))
getsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, &(0x7f0000000080))

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)

18:27:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000840}, 0x8000)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, r0, 0x2, 0x8000000, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63d65742}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}}, 0x0)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd4, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x2001c000)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc4d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000811}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) (async)
getsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, &(0x7f0000000080))

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (rerun: 32)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffad, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0xc4)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd4, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x2001c000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xd4, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x2001c000) (async)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff70ea}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8800)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x11c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x72d26737}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe3b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000800)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffad, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0xc4)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:13 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
accept4$llc(r0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffad, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0xc4)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff70ea}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8800)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x11c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x72d26737}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe3b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000800) (rerun: 32)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000eede069aab37bfecbe0000000000"], 0x2c}}, 0x0)

18:27:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x5, 0x80)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x1e, 0x4)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x4004000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000eede069aab37bfecbe0000000000"], 0x2c}}, 0x0)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff70ea}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8800)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x11c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x72d26737}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe3b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff70ea}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8800) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x11c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x72d26737}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe3b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000800) (async)

18:27:13 executing program 4:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x9e)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000040))

18:27:13 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
accept4$llc(r0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
accept4$llc(r0, 0x0, 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x4004000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000f3c8d5459380f9cc08000000000c000000df0b000000000000"], 0x2c}}, 0x0)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000eede069aab37bfecbe0000000000"], 0x2c}}, 0x0)

18:27:13 executing program 4:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x9e) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000040))

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x4004000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r3=>r2, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r4, 0x1, r5, r6]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r7=>r2, 0x2f, 0x4, 0x4, 0x3, 0x2a, @mcast1, @local, 0x8000, 0x8000, 0x8, 0x7fffffff}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000d80)={0xffffffffffffffff, 0x1, 0x81, r7, 0x8}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r5, 0x10001, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b3030000eb8d000000006c06323effff185400718b0000000000000000000000d19d925139c4a284af99b0f86e33d3e8dba1174146158cace9b672ebaf1d44e065ae5c46216a076feff813f6e29cca333bb99a60dfd66f58d66626c56628071db1c36cb14fb36483b8fc5e9b2e04ea39f032bf3ebcbb47ff0de3d7acb36f07d6cf720ebe6282b00477b1a91593b43945f37f3c0854192032905140a482af20376ec878604fbe06dd3b56a0ff69cc45adb27e3e051a6598a897dc4b200332db288a1a00"/206], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r5, r6, r5, r9, r4, r6, r10]}, 0x80)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0xfffffeff, 0x5, 0x8001, 0x1018, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0x9, 0x7, 0x40, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc915, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x5, 0x0, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0xa}, @generic={0x4, 0x8, 0x5, 0x5, 0x1}, @generic={0x9, 0x0, 0xd, 0x1, 0x4}, @jmp={0x5, 0x1, 0xa, 0x5, 0x2, 0x80}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb6, &(0x7f00000000c0)=""/182, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x3f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r9, r11, r12, 0xffffffffffffffff]}, 0x80)

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = socket$inet6(0xa, 0x5, 0x80)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x1e, 0x4) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000f3c8d5459380f9cc08000000000c000000df0b000000000000"], 0x2c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000f3c8d5459380f9cc08000000000c000000df0b000000000000"], 0x2c}}, 0x0) (async)

18:27:13 executing program 4:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x9e)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000040))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x9e) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000040)) (async)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110500000000ffffffff0815abd352d90f0374c522ba38e0c22594d69b35002f661780883391c2ad38e57e2721572fc3f6ecc0529cc18405a8186526797f03563affa515dd9afd0808e1e315c839e58f290bfed9dabc88580612fe88fdf2f03e67ec1272d863d10949afe1f67636ee"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd902}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30103400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd945}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40045}, 0x1)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r3=>r2, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) (async)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r4, 0x1, r5, r6]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r7=>r2, 0x2f, 0x4, 0x4, 0x3, 0x2a, @mcast1, @local, 0x8000, 0x8000, 0x8, 0x7fffffff}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000d80)={0xffffffffffffffff, 0x1, 0x81, r7, 0x8}, 0xc) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r5, 0x10001, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48) (async)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b3030000eb8d000000006c06323effff185400718b0000000000000000000000d19d925139c4a284af99b0f86e33d3e8dba1174146158cace9b672ebaf1d44e065ae5c46216a076feff813f6e29cca333bb99a60dfd66f58d66626c56628071db1c36cb14fb36483b8fc5e9b2e04ea39f032bf3ebcbb47ff0de3d7acb36f07d6cf720ebe6282b00477b1a91593b43945f37f3c0854192032905140a482af20376ec878604fbe06dd3b56a0ff69cc45adb27e3e051a6598a897dc4b200332db288a1a00"/206], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r5, r6, r5, r9, r4, r6, r10]}, 0x80) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0xfffffeff, 0x5, 0x8001, 0x1018, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0x9, 0x7, 0x40, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc915, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x5, 0x0, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0xa}, @generic={0x4, 0x8, 0x5, 0x5, 0x1}, @generic={0x9, 0x0, 0xd, 0x1, 0x4}, @jmp={0x5, 0x1, 0xa, 0x5, 0x2, 0x80}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb6, &(0x7f00000000c0)=""/182, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x3f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r9, r11, r12, 0xffffffffffffffff]}, 0x80)

18:27:13 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
accept4$llc(r0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
accept4$llc(r0, 0x0, 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

18:27:13 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000f3c8d5459380f9cc08000000000c000000df0b000000000000"], 0x2c}}, 0x0)

18:27:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x16, 0x0, 0xb6}, 0xc)

18:27:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110500000000ffffffff0815abd352d90f0374c522ba38e0c22594d69b35002f661780883391c2ad38e57e2721572fc3f6ecc0529cc18405a8186526797f03563affa515dd9afd0808e1e315c839e58f290bfed9dabc88580612fe88fdf2f03e67ec1272d863d10949afe1f67636ee"], 0x1c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd902}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30103400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd945}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40045}, 0x1)

18:27:13 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r3=>r2, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r4, 0x1, r5, r6]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r7=>r2, 0x2f, 0x4, 0x4, 0x3, 0x2a, @mcast1, @local, 0x8000, 0x8000, 0x8, 0x7fffffff}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000d80)={0xffffffffffffffff, 0x1, 0x81, r7, 0x8}, 0xc) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r5, 0x10001, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b3030000eb8d000000006c06323effff185400718b0000000000000000000000d19d925139c4a284af99b0f86e33d3e8dba1174146158cace9b672ebaf1d44e065ae5c46216a076feff813f6e29cca333bb99a60dfd66f58d66626c56628071db1c36cb14fb36483b8fc5e9b2e04ea39f032bf3ebcbb47ff0de3d7acb36f07d6cf720ebe6282b00477b1a91593b43945f37f3c0854192032905140a482af20376ec878604fbe06dd3b56a0ff69cc45adb27e3e051a6598a897dc4b200332db288a1a00"/206], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r5, r6, r5, r9, r4, r6, r10]}, 0x80)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0xfffffeff, 0x5, 0x8001, 0x1018, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0x9, 0x7, 0x40, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc915, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x5, 0x0, 0xffffffffffffffe0, 0x8}, @map_fd={0x18, 0xa}, @generic={0x4, 0x8, 0x5, 0x5, 0x1}, @generic={0x9, 0x0, 0xd, 0x1, 0x4}, @jmp={0x5, 0x1, 0xa, 0x5, 0x2, 0x80}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb6, &(0x7f00000000c0)=""/182, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x3f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r9, r11, r12, 0xffffffffffffffff]}, 0x80)

18:27:13 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x16, 0x0, 0xb6}, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x16, 0x0, 0xb6}, 0xc) (async)

18:27:13 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = socket$inet6(0xa, 0x5, 0x80)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x1e, 0x4) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110500000000ffffffff0815abd352d90f0374c522ba38e0c22594d69b35002f661780883391c2ad38e57e2721572fc3f6ecc0529cc18405a8186526797f03563affa515dd9afd0808e1e315c839e58f290bfed9dabc88580612fe88fdf2f03e67ec1272d863d10949afe1f67636ee"], 0x1c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd902}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30103400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd945}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40045}, 0x1)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0xf8, 0x5c, 0x6, 0x8}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd402}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4010)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x16, 0x0, 0xb6}, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x16, 0x0, 0xb6}, 0xc) (async)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x28}}, 0x20000000)

18:27:14 executing program 0:
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0xf8, 0x5c, 0x6, 0x8}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd402}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) (async)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x28}}, 0x20000000)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc09d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44810}, 0x24040001)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) (async)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x111, 0x0, 0xffffffff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x28}}, 0x20000000)

18:27:14 executing program 3:
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40420, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6(0xa, 0x4, 0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x3f, 0x5, 0x0, 0x2, @private2, @private2, 0x8, 0x700, 0x5, 0x4}})
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x24, r2, 0x8000}, 0xc)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0xf8, 0x5c, 0x6, 0x8}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd402}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) (async)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc09d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44810}, 0x24040001)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc09d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44810}, 0x24040001) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) (async)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x5000)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) (async)

18:27:14 executing program 0:
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x5000) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0xf8, 0x5c, 0x6, 0x8}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd402}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4010)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc09d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44810}, 0x24040001)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x13c, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1800}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x5000)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x5000) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x13c, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1800}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x13c, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1800}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) (async)

18:27:14 executing program 3:
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40420, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6(0xa, 0x4, 0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x3f, 0x5, 0x0, 0x2, @private2, @private2, 0x8, 0x700, 0x5, 0x4}})
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x24, r2, 0x8000}, 0xc)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40420, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
socket$inet6(0xa, 0x4, 0x7) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x5, 0x0, 0x2, @private2, @private2, 0x8, 0x700, 0x5, 0x4}}) (async)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x24, r2, 0x8000}, 0xc) (async)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r2=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x29, 0x5, 0x3, 0x6, 0x1, @mcast1, @remote, 0x40, 0x20, 0x6, 0x8c8e}})

18:27:14 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda97}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc091}, 0x4000000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x13c, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1800}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000)

18:27:14 executing program 0:
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$llc(r0, 0x0, 0x0, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
accept4$llc(r0, 0x0, 0x0, 0x0) (async)

18:27:14 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="9151f442edc1ba4942dbc5be6409e603e1fba70058190641c5b6402a17b16e6e5974f118958bb14b3a8731741fe7820c33059605f9bc59d796383f30b59cfc4ef09cb38707dae84909aaa04c4a5b76e5c1279563f0e65c2e0ad9a0b86b38cccf7e0ae75bf6a4b25d0b6e5a5685d0c878a03eb407360ea5c1bb12b9a2f5eb524ec022"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8080)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r2=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x29, 0x5, 0x3, 0x6, 0x1, @mcast1, @remote, 0x40, 0x20, 0x6, 0x8c8e}})

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x0, 0x7, 0x9, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x8000, 0x0, 0x9}})
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', <r4=>r2, 0x2f, 0x5, 0x6, 0x1, 0x11, @empty, @mcast1, 0x700, 0x1, 0x4, 0x3}})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0xaa155f1bc669f58d, 0x21, r4, 0x800}, 0xc)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x8142, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r7, 0x8008330e, &(0x7f0000000100))

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r2=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x29, 0x5, 0x3, 0x6, 0x1, @mcast1, @remote, 0x40, 0x20, 0x6, 0x8c8e}})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000040)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x29, 0x5, 0x3, 0x6, 0x1, @mcast1, @remote, 0x40, 0x20, 0x6, 0x8c8e}}) (async)

18:27:14 executing program 3:
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40420, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6(0xa, 0x4, 0x7) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r2=>0x0, 0x29, 0x3f, 0x5, 0x0, 0x2, @private2, @private2, 0x8, 0x700, 0x5, 0x4}})
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x24, r2, 0x8000}, 0xc)

18:27:14 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x101)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24060041}, 0x4024)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xffffffff)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4044020)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000dabc282c7e48a15256dd9a07e3821b161fa564545e0a7c2e9ca13f2baabaa6e79d4e84f53425df61c5", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2507000000050007000300000006000100080000ad"], 0x24}, 0x1, 0x0, 0x0, 0x24048041}, 0x44044)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe687}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x70}}, 0x4000)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200c0a0}, 0x48000)

18:27:14 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5ae4c1a2442d163b8fe65549cf14d859b95720233ffe71c6eb5aede1000de539295aaf41fac70f1aef9df32ebc3db9fa1fe4f335e42061794b6072a5d05facbdac14bfde39a7b70ecfb695481bf6fe917265c0fe9f79a95576447dd04071a88fe9944ae2681b63b1c77b6fc1fde858fc128d180e697db57cc8d84c13cac772cd55ee4952eb5aedce8a201822fef44fccb42f42682898fb98f47604e1b67531f88b23c43cb40a1d316c86d07771dae92c64bfd98f48357ed7e1fa692de8a881d19d08e2a729651ee2eecac9ffdb44fe6742d92c6b550bebf2d9d50f1b3fb05da702c2aafbb41872ef86865d7b12ebd763f000"/253, @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400feffffff1800028014000100e00000020000000000000000000000000800060000000000"], 0x3c}}, 0x0)

18:27:14 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0))
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xffffffff)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0)

18:27:14 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xffffffff)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="74e12869", @ANYRES16=r1, @ANYBLOB="000428bd7000fcdbdf25090000000c00018008000800060000002400028008000300010000000800050007000000080005007f00000008000400d00600000800050000000100300003801400060000000000000000000000ffffe0000001060004000004000008000500ffffffff08000300000000000800060000020000"], 0x84}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x100}}, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x86}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xac}}, 0x40)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="74e12869", @ANYRES16=r1, @ANYBLOB="000428bd7000fcdbdf25090000000c00018008000800060000002400028008000300010000000800050007000000080005007f00000008000400d00600000800050000000100300003801400060000000000000000000000ffffe0000001060004000004000008000500ffffffff08000300000000000800060000020000"], 0x84}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x100}}, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x86}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xac}}, 0x40)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xde2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7e7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000a0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x201, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcd95}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x8800)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x8011)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x34}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x958}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="74e12869", @ANYRES16=r1, @ANYBLOB="000428bd7000fcdbdf25090000000c00018008000800060000002400028008000300010000000800050007000000080005007f00000008000400d00600000800050000000100300003801400060000000000000000000000ffffe0000001060004000004000008000500ffffffff08000300000000000800060000020000"], 0x84}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x100}}, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x86}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xac}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="74e12869", @ANYRES16=r1, @ANYBLOB="000428bd7000fcdbdf25090000000c00018008000800060000002400028008000300010000000800050007000000080005007f00000008000400d00600000800050000000100300003801400060000000000000000000000ffffe0000001060004000004000008000500ffffffff08000300000000000800060000020000"], 0x84}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x100}}, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x86}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xac}}, 0x40) (async)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000dabc282c7e48a15256dd9a07e3821b161fa564545e0a7c2e9ca13f2baabaa6e79d4e84f53425df61c5", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2507000000050007000300000006000100080000ad"], 0x24}, 0x1, 0x0, 0x0, 0x24048041}, 0x44044)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe687}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x70}}, 0x4000)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200c0a0}, 0x48000)

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xffffffff)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xffffffff) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0) (async)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xd4, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)

[ 1236.922995] nla_parse: 27 callbacks suppressed
[ 1236.923001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
18:27:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff17}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40401d0}, 0xc000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40014)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88880000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ceb0000", @ANYRES16=r1, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060000000000"], 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40811)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000dabc282c7e48a15256dd9a07e3821b161fa564545e0a7c2e9ca13f2baabaa6e79d4e84f53425df61c5", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2507000000050007000300000006000100080000ad"], 0x24}, 0x1, 0x0, 0x0, 0x24048041}, 0x44044)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe687}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x70}}, 0x4000)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200c0a0}, 0x48000)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000dabc282c7e48a15256dd9a07e3821b161fa564545e0a7c2e9ca13f2baabaa6e79d4e84f53425df61c5", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2507000000050007000300000006000100080000ad"], 0x24}, 0x1, 0x0, 0x0, 0x24048041}, 0x44044) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe687}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x70}}, 0x4000) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200c0a0}, 0x48000) (async)

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x20040004)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x81}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x70}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048801}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40014)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88880000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ceb0000", @ANYRES16=r1, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf250700000008000b0001000000"], 0x1c}}, 0x8010)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xac, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x72825bfb47ad55fd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x16e9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe42}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xac}, 0x1, 0x0, 0x0, 0x48050}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11010003551bfcdc91ac8b43bc48a426000000010000000c000000080004000000000008932039e0a21eaee06a0bfa4cfd6d6014ec5feeb947dbd43119bcfca9e851ea7e46ef907b35b721c4350b54fa28c7b1ba0d053d078ac013c16c912da7fe16b7f50bf5da119dfbf7312822282ef5cdb1beab87435184302b32264966eddcb460f80dde9839bfe55b58b558c096ecde319e82ccd3f745f13c4d40c0241f7635704c8f359f0f9fe53d28c5eff6dd4621410d21ea0f12929c2b2bf7b60ba260ed936ef258ebe926a675557b7d3caefd6e786e9a820a969d78c3037ce72569f52b9b955914dcf8ec22d3981894e378bc32bdf1d39e5b7b89eb94a7bcc83e08066086c001a256b880228143d7cdfa"], 0x2c}}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa10}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf60}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd73a4cfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8021}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4014)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r0, 0x300, 0x0, 0xfffffffd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xedfe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x48}}, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40014)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88880000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44001)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ceb0000", @ANYRES16=r1, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40014) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88880000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44001) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ceb0000", @ANYRES16=r1, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0) (async)

18:27:14 executing program 0:
ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x2802, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x129400, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000180))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000001c0))

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa10}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf60}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd73a4cfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8021}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4014)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa10}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf60}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd73a4cfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8021}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4014) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048840}, 0x4044840)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cf5c95c31000000", @ANYRES16=r4, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e1c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000001c0)={0x4, 0x1000})

18:27:14 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}]}, 0x34}}, 0x24040851)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f3522aaa", @ANYRES16=r3, @ANYBLOB="00080000000000000000060000000800040000000000"], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x581, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4044880}, 0x0)

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048840}, 0x4044840)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cf5c95c31000000", @ANYRES16=r4, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e1c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000001c0)={0x4, 0x1000})

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:14 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa10}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf60}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd73a4cfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8021}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4014)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa10}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf60}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd73a4cfc}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8021}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4014) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048840}, 0x4044840) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cf5c95c31000000", @ANYRES16=r4, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e1c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000001c0)={0x4, 0x1000})

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:14 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:14 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500001d00000800060000000000"], 0x2c}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcb4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6ee4ab29}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x40005)

18:27:14 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:14 executing program 4:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40c040, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480080)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="32de8cab", @ANYRES16, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4048081)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x1, 0x5})

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x30, 0x5, 0x8, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, @empty, 0x7, 0x8000, 0x7, 0x8fbf}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r6=>r4, 0x2f, 0x87, 0x1, 0x26, 0xf, @remote, @remote, 0x10, 0x80, 0x21, 0x1}})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r6, 0x29, 0x9e, 0x9d, 0x80000001, 0x30, @mcast1, @local, 0x8, 0x700, 0x8329, 0x1ff}})
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 4:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40c040, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 4:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40c040, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40c040, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480080)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="32de8cab", @ANYRES16, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4048081)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x1, 0x5})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480080) (async)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="32de8cab", @ANYRES16, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4048081) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x1, 0x5}) (async)

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

[ 1237.354322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
18:27:15 executing program 0:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x30, 0x5, 0x8, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, @empty, 0x7, 0x8000, 0x7, 0x8fbf}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r6=>r4, 0x2f, 0x87, 0x1, 0x26, 0xf, @remote, @remote, 0x10, 0x80, 0x21, 0x1}})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r6, 0x29, 0x9e, 0x9d, 0x80000001, 0x30, @mcast1, @local, 0x8, 0x700, 0x8329, 0x1ff}})
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x8) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x30, 0x5, 0x8, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, @empty, 0x7, 0x8000, 0x7, 0x8fbf}}) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r6=>r4, 0x2f, 0x87, 0x1, 0x26, 0xf, @remote, @remote, 0x10, 0x80, 0x21, 0x1}}) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r6, 0x29, 0x9e, 0x9d, 0x80000001, 0x30, @mcast1, @local, 0x8, 0x700, 0x8329, 0x1ff}})
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480080)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="32de8cab", @ANYRES16, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4048081)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x1, 0x5})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480080) (async)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="32de8cab", @ANYRES16, @ANYBLOB="110100000000000000000c00000008000400ffffffff"], 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4048081) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x1, 0x5}) (async)

18:27:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

[ 1237.442583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1237.473537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0)
r2 = accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x80800)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000480)=0xfffffffffffffe6b)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x5e, 0x3, 0x35, 0xfb, 0x20, @mcast2, @local, 0x7800, 0x829adf1e57eb4c52, 0x7fff, 0x6}})
recvfrom$llc(r5, &(0x7f0000000140)=""/246, 0xf6, 0x10202, &(0x7f0000000240)={0x1a, 0x20, 0x8, 0x1, 0x0, 0xe5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000440)=0x4, 0x4)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r7 = accept4$llc(r1, 0x0, &(0x7f0000000100), 0x80800)
accept4$llc(r7, 0x0, 0x0, 0x81000)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x30, 0x5, 0x8, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, @empty, 0x7, 0x8000, 0x7, 0x8fbf}}) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r6=>r4, 0x2f, 0x87, 0x1, 0x26, 0xf, @remote, @remote, 0x10, 0x80, 0x21, 0x1}}) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r6, 0x29, 0x9e, 0x9d, 0x80000001, 0x30, @mcast1, @local, 0x8, 0x700, 0x8329, 0x1ff}}) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1237.526064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1237.555575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
18:27:15 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x5)

18:27:15 executing program 2:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:15 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0)
r2 = accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x80800)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000480)=0xfffffffffffffe6b)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x5e, 0x3, 0x35, 0xfb, 0x20, @mcast2, @local, 0x7800, 0x829adf1e57eb4c52, 0x7fff, 0x6}})
recvfrom$llc(r5, &(0x7f0000000140)=""/246, 0xf6, 0x10202, &(0x7f0000000240)={0x1a, 0x20, 0x8, 0x1, 0x0, 0xe5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000440)=0x4, 0x4)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r7 = accept4$llc(r1, 0x0, &(0x7f0000000100), 0x80800)
accept4$llc(r7, 0x0, 0x0, 0x81000)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd23, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x200400c0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8)

18:27:15 executing program 5:
keyctl$session_to_parent(0x12)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x403)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
r1 = getpid()
setpriority(0x1, r1, 0x8001)
waitid(0x2, r1, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x24)
r2 = getpid()
waitid(0x0, r2, 0x0, 0x8, 0x0)

18:27:15 executing program 2:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020026bd7000fedbdf250700000008000b00030000000c071000040000000000000008000c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20008000)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000080))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x2, 0x80000001, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x9, 0xff}})

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 2:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd23, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x200400c0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:15 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020026bd7000fedbdf250700000008000b00030000000c071000040000000000000008000c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20008000)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000080))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x2, 0x80000001, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x9, 0xff}})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020026bd7000fedbdf250700000008000b00030000000c071000040000000000000008000c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20008000) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x2, 0x80000001, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x9, 0xff}}) (async)

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 5:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020026bd7000fedbdf250700000008000b00030000000c071000040000000000000008000c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x20008000) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000080))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x2, 0x80000001, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x9, 0xff}})

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd23, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x200400c0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8)

18:27:15 executing program 2:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x88}, 0x0, 0x1}})
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:15 executing program 2:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x88}, 0x0, 0x1}})
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)

18:27:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:15 executing program 2:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x800000)

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6c}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc00}, 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x88}, 0x0, 0x1}})
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:15 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6c}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc00}, 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) (async)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6c}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc00}, 0x1) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140)) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6c}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc00}, 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:15 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:15 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:15 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140)) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

18:27:15 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xde}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4055}, 0x20000000)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xfc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000040)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9b5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x2c}}, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x28804)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2fd020d974643eb6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x186d}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x68}}, 0x44010)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xde}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4055}, 0x20000000)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xfc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000040)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9b5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x80) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x2c}}, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x28804) (async)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2fd020d974643eb6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x186d}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x68}}, 0x44010)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xde}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4055}, 0x20000000)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0xfc}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000040) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1238.415878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:27:16 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9b5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x2c}}, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x28804)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2fd020d974643eb6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x186d}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x68}}, 0x44010)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9b5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x2c}}, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x2c}}, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x28804) (async, rerun: 32)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2fd020d974643eb6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x186d}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x68}}, 0x44010) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x159b03, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x903c1, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000100))
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x5)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)

[ 1238.509189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
18:27:16 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xdbd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048088)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000000}, 0x80)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x159b03, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x903c1, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000100))
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x5)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x159b03, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x903c1, 0x0) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000100)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x5) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:16 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)

18:27:16 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x159b03, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x903c1, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000100))
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x5)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x159b03, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x903c1, 0x0) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000100)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x5) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1)

18:27:16 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6c}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc00}, 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:16 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x58, 0x3, 0x24, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x1, 0x8, 0x39}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x820208}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x180, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x11540fef}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x9800}, 0x24000890)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
prctl$PR_GET_TIMERSLACK(0x1e) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:16 executing program 3:
sendto$llc(0xffffffffffffffff, &(0x7f00000000c0)="c1398a9e821cc285ae24d97ff5af823f7edd104095377afab438768903d19ee3bd3940fbb013db3ebff4bc98a025e18ec8f911cd382aa3685f15661d3d5e26e513f55f986fba3e285ec08912eb92f0", 0x4f, 0x4048000, &(0x7f0000000140)={0x1a, 0x312, 0xc0, 0xff, 0x9, 0x6c}, 0x10)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000002c0)=0x6)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0xa)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a5100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100)=0x4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000340)=0x9)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f00000001c0)=0xffffffff)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x430240, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000280))

18:27:16 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x2}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffde2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8f, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0))
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @mcast1, 0x7}, {0xa, 0x4e21, 0xbc, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7f}, 0xffffffffffffffff, {[0x7fff, 0x200, 0x6, 0x9, 0x8, 0x0, 0x8e2c, 0xffff8001]}}, 0x5c)

18:27:16 executing program 3:
sendto$llc(0xffffffffffffffff, &(0x7f00000000c0)="c1398a9e821cc285ae24d97ff5af823f7edd104095377afab438768903d19ee3bd3940fbb013db3ebff4bc98a025e18ec8f911cd382aa3685f15661d3d5e26e513f55f986fba3e285ec08912eb92f0", 0x4f, 0x4048000, &(0x7f0000000140)={0x1a, 0x312, 0xc0, 0xff, 0x9, 0x6c}, 0x10) (async, rerun: 32)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0)) (async)
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @mcast1, 0x7}, {0xa, 0x4e21, 0xbc, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7f}, 0xffffffffffffffff, {[0x7fff, 0x200, 0x6, 0x9, 0x8, 0x0, 0x8e2c, 0xffff8001]}}, 0x5c)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0))
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @mcast1, 0x7}, {0xa, 0x4e21, 0xbc, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7f}, 0xffffffffffffffff, {[0x7fff, 0x200, 0x6, 0x9, 0x8, 0x0, 0x8e2c, 0xffff8001]}}, 0x5c)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44080)
prctl$PR_CAPBSET_READ(0x17, 0x5)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0xa5f1add5b227824e, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 3:
sendto$llc(0xffffffffffffffff, &(0x7f00000000c0)="c1398a9e821cc285ae24d97ff5af823f7edd104095377afab438768903d19ee3bd3940fbb013db3ebff4bc98a025e18ec8f911cd382aa3685f15661d3d5e26e513f55f986fba3e285ec08912eb92f0", 0x4f, 0x4048000, &(0x7f0000000140)={0x1a, 0x312, 0xc0, 0xff, 0x9, 0x6c}, 0x10) (async)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:16 executing program 5:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44080)
prctl$PR_CAPBSET_READ(0x17, 0x5)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0xa5f1add5b227824e, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) (async)
prctl$PR_CAPBSET_READ(0x17, 0x5) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0xa5f1add5b227824e, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)) (async)

18:27:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 5:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:16 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 5:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:16 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) (async)
prctl$PR_CAPBSET_READ(0x17, 0x5) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0xa5f1add5b227824e, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))

18:27:16 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:16 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

18:27:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x800, @mcast1, 0x81}, {0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8000}, 0x1, {[0x1, 0x3, 0x1f, 0x0, 0x0, 0xc9, 0x7]}}, 0x5c)

18:27:17 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x800, @mcast1, 0x81}, {0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8000}, 0x1, {[0x1, 0x3, 0x1f, 0x0, 0x0, 0xc9, 0x7]}}, 0x5c)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5) (async)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x800, @mcast1, 0x81}, {0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8000}, 0x1, {[0x1, 0x3, 0x1f, 0x0, 0x0, 0xc9, 0x7]}}, 0x5c)

18:27:17 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 2:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
alarm(0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:17 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5) (async)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
alarm(0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:17 executing program 2:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:17 executing program 2:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 4:
alarm(0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:17 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x9, 0x2, 0x2c, &(0x7f0000000140)="7ec320f3458d02f564b9c3e24d4fa0abbd6564a1f76b014488064808885a1fff21c46f06edae325441a090b0"})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000000c0))

18:27:17 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0))

18:27:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x9, 0x2, 0x2c, &(0x7f0000000140)="7ec320f3458d02f564b9c3e24d4fa0abbd6564a1f76b014488064808885a1fff21c46f06edae325441a090b0"})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000000c0))

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

18:27:17 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)) (async)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

18:27:17 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x9, 0x2, 0x2c, &(0x7f0000000140)="7ec320f3458d02f564b9c3e24d4fa0abbd6564a1f76b014488064808885a1fff21c46f06edae325441a090b0"}) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000000c0))

18:27:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0))

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)

18:27:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x5)

18:27:17 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x401, 0x6, 0x0, 0x9, 0x1, r1})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r3=>0x0, 0x0, 0x8, 0xff, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8, 0x7800, 0x8, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x4, 0x3, 0x0, 0x800, 0x44, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x1ff, 0x4}})

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:17 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x77aa, 0x4, 0x1, 0x20, 0x1, 0x387, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97ce}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x41)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x100002, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x5, 0xbe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r0]}, 0x80)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x401, 0x6, 0x0, 0x9, 0x1, r1})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r3=>0x0, 0x0, 0x8, 0xff, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8, 0x7800, 0x8, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x4, 0x3, 0x0, 0x800, 0x44, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x1ff, 0x4}})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
getpid() (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x401, 0x6, 0x0, 0x9, 0x1, r1}) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x8, 0xff, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8, 0x7800, 0x8, 0x7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x4, 0x3, 0x0, 0x800, 0x44, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x1ff, 0x4}}) (async)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x24000881)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:17 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x401, 0x6, 0x0, 0x9, 0x1, r1})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r3=>0x0, 0x0, 0x8, 0xff, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8, 0x7800, 0x8, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x4, 0x3, 0x0, 0x800, 0x44, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x1ff, 0x4}})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
getpid() (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x401, 0x6, 0x0, 0x9, 0x1, r1}) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x8, 0xff, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x8, 0x7800, 0x8, 0x7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x4, 0x3, 0x0, 0x800, 0x44, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x1ff, 0x4}}) (async)

18:27:17 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x77aa, 0x4, 0x1, 0x20, 0x1, 0x387, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97ce}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x41)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x100002, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x5, 0xbe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r0]}, 0x80)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x77aa, 0x4, 0x1, 0x20, 0x1, 0x387, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97ce}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x41) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x100002, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x5, 0xbe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r0]}, 0x80) (async)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:17 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:17 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x77aa, 0x4, 0x1, 0x20, 0x1, 0x387, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97ce}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x41)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x100002, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x5, 0xbe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r0]}, 0x80)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x77aa, 0x4, 0x1, 0x20, 0x1, 0x387, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97ce}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x41) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x100002, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x5, 0xbe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, r0]}, 0x80) (async)

18:27:17 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:17 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:18 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768046500000000"], 0x2c}}, 0x0)

18:27:18 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:18 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:18 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:18 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:18 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:18 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:18 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

18:27:18 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:18 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:18 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:18 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:19 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:19 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:19 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)

18:27:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)

18:27:19 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:19 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:19 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:19 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

18:27:19 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:19 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
sched_setparam(r1, &(0x7f0000000000)=0x8001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x5)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140))
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x8058}, 0x4048810)

18:27:19 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:19 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)

18:27:20 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
sched_setparam(r1, &(0x7f0000000000)=0x8001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x5)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140))
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x8058}, 0x4048810)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
getpid() (async)
sched_setparam(r1, &(0x7f0000000000)=0x8001) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x5) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140)) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x8058}, 0x4048810) (async)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:20 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

18:27:20 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f00000000c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:20 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
sched_setparam(r1, &(0x7f0000000000)=0x8001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x5)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140))
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x8058}, 0x4048810)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
getpid() (async)
sched_setparam(r1, &(0x7f0000000000)=0x8001) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x5) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000140)) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf25030000002400028006000b000a0000000800060028000000060002004e23000008000003801400060020010000000000000000000000400002080003000300000014000600000000000000000000000000000000010800030000000000080006003300000008000400b7ffffff0000000000000000000000000000001045819e7735a86b87588a95cb955fdf5480622270b4e5cf65e6e38a7ed5439de8091debf5434f6cc82152d30e65da628136240361124f96ffbaf087723796ca7c4309099cae10ebd70acd4947f6942e7bcf06318c770f03554faf48be08e1d106b927a211ce0755f40100456bd5b467ffe3269c945eec5a628b3f9c0b1f00d2489aef747964fd9363ced52d5cba4a77f445478842495d37578052b1715be417cbf9dc6f228c62f53111c8205efde297"], 0x8c}, 0x1, 0x0, 0x0, 0x8058}, 0x4048810) (async)

18:27:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f00000000c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)

18:27:20 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

18:27:20 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:20 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 4:
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x55}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048001}, 0x4040000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="a3eea566cac00c4e10a5fee594e971cdaf0354c09e52b3814e0382ee9f31ba96e8feb4fc5985b299b1f2af236829c74fa5fc8d8b5ee3b3fca9fc54be71b0d8f27b185f0c3300cf210b821bacdb7247fc3b58a3b52f9aaa020ec341b56e", 0x5d)

18:27:20 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x104)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0001267574cfaa63a5d71e2c34774488e89934bd7000fbdbdf25020000000c000f00e85f8e000000000006001a004e240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:20 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 4:
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x55}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048001}, 0x4040000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="a3eea566cac00c4e10a5fee594e971cdaf0354c09e52b3814e0382ee9f31ba96e8feb4fc5985b299b1f2af236829c74fa5fc8d8b5ee3b3fca9fc54be71b0d8f27b185f0c3300cf210b821bacdb7247fc3b58a3b52f9aaa020ec341b56e", 0x5d)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x55}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048001}, 0x4040000) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="a3eea566cac00c4e10a5fee594e971cdaf0354c09e52b3814e0382ee9f31ba96e8feb4fc5985b299b1f2af236829c74fa5fc8d8b5ee3b3fca9fc54be71b0d8f27b185f0c3300cf210b821bacdb7247fc3b58a3b52f9aaa020ec341b56e", 0x5d) (async)

18:27:20 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:20 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:20 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 4:
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x55}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048001}, 0x4040000) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="a3eea566cac00c4e10a5fee594e971cdaf0354c09e52b3814e0382ee9f31ba96e8feb4fc5985b299b1f2af236829c74fa5fc8d8b5ee3b3fca9fc54be71b0d8f27b185f0c3300cf210b821bacdb7247fc3b58a3b52f9aaa020ec341b56e", 0x5d)

18:27:21 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x104)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x104) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:21 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x320, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x70}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40084)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x38}}, 0x40)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000), 0x4)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

[ 1243.482729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:27:21 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x320, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x70}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40084) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x38}}, 0x40) (async)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000), 0x4)

18:27:21 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x104)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

18:27:21 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x320, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x70}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40084) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) (async, rerun: 32)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (rerun: 32)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x38}}, 0x40) (async)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000), 0x4)

[ 1243.607379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:27:21 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:21 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 3:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x104)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)

[ 1243.718262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000180))

18:27:21 executing program 5:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x4955)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000180))

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:21 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

18:27:21 executing program 3:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x101)
accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) (async)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0)

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x40)

18:27:21 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (async)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

18:27:21 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe34, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r1, @ANYBLOB="00082dbd7000ffdbdf250400000006000300070000000500120004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000041)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000000))

18:27:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
accept4$llc(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x14)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:21 executing program 3:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) (async, rerun: 32)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:21 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe34, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r1, @ANYBLOB="00082dbd7000ffdbdf250400000006000300070000000500120004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) (async, rerun: 32)
socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32)
r2 = socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000000))

18:27:21 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000280)={0x80000000, 0x380000000000000, 0x8, 0xbd8})
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000240)=0x100)
accept4$llc(r0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40010)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48010001", @ANYRES16=r1, @ANYBLOB="000428bd7000ffdbdf250b00000008000600ad0400004800028005000d000000000006000e004e230000080005000600000014000100e000000200000000000000000000000008000800fd000000080006000000000005000d0029000000080005000000000808000600020000002000038008000300040000001400020076657468305f766c616e0000000000004c000380080001000200000014000600ff02000000000000000000000000000108000500640101000600040008000000060007004e24000014000200726f7365300000000000000000000000680003801400020076657468305f746f5f627269646765000800030003000000080005000a010101060007004e2300001400060020010000000000000000000000000001060007004e200000060004008100000014000200767863616e3100"/322], 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x48044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x70804000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x48000)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r6)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

18:27:21 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x7ff})
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:21 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe34, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r1, @ANYBLOB="00082dbd7000ffdbdf250400000006000300070000000500120004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000041)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000000))

18:27:21 executing program 3:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x8)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x2}, 0x8)

18:27:21 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (fail_nth: 1)

18:27:21 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x7c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}]}, 0x7c}}, 0x0)

18:27:21 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (fail_nth: 1)

18:27:22 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 1)

18:27:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x81, 0x9, 0x20, @mcast2, @private0, 0x20, 0x7c9, 0x4922, 0x8}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:22 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:22 executing program 3:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x8)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x2}, 0x8)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
select(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x8) (async)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x2}, 0x8) (async)

18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x6072e8a189ec3e98)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4, <r3=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2, 0x5, 0x9, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, @private2, @dev}})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000040))

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (rerun: 32)

[ 1244.385979] FAULT_INJECTION: forcing a failure.
[ 1244.385979] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.403584] CPU: 0 PID: 28778 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1244.411559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1244.420907] Call Trace:
[ 1244.423490]  dump_stack+0x1b2/0x281
[ 1244.427124]  should_fail.cold+0x10a/0x149
[ 1244.431270]  should_failslab+0xd6/0x130
18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x6072e8a189ec3e98)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4, <r3=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2, 0x5, 0x9, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, @private2, @dev}})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000040))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x6072e8a189ec3e98) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4}, &(0x7f00000000c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2, 0x5, 0x9, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, @private2, @dev}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000040)) (async)

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)

[ 1244.435248]  kmem_cache_alloc_node+0x263/0x410
[ 1244.439962]  __alloc_skb+0x5c/0x510
[ 1244.443590]  netlink_sendmsg+0x91e/0xbc0
[ 1244.447650]  ? nlmsg_notify+0x1b0/0x1b0
[ 1244.451620]  ? kernel_recvmsg+0x210/0x210
[ 1244.455762]  ? security_socket_sendmsg+0x83/0xb0
[ 1244.460516]  ? nlmsg_notify+0x1b0/0x1b0
[ 1244.464485]  sock_sendmsg+0xb5/0x100
[ 1244.468194]  ___sys_sendmsg+0x6c8/0x800
[ 1244.472258]  ? get_pid_task+0x91/0x130
[ 1244.476136]  ? copy_msghdr_from_user+0x3b0/0x3b0
[ 1244.480891]  ? lock_downgrade+0x740/0x740
18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x7fff, 0x1})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0x2, 0x4231})

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async, rerun: 64)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2)
ioctl$BLKRRPART(r2, 0x125f, 0x0) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async, rerun: 64)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x7fff, 0x1})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0x2, 0x4231})

[ 1244.485038]  ? __fget+0x23e/0x3e0
[ 1244.488497]  ? lock_acquire+0x170/0x3f0
[ 1244.492471]  ? lock_downgrade+0x740/0x740
[ 1244.496801]  ? __fget+0x265/0x3e0
[ 1244.500268]  ? __fdget+0x19b/0x1f0
[ 1244.503805]  ? sockfd_lookup_light+0xb2/0x160
[ 1244.508389]  __sys_sendmsg+0xa3/0x120
[ 1244.512359]  ? SyS_shutdown+0x160/0x160
[ 1244.516417]  ? wait_for_completion_io+0x10/0x10
[ 1244.521088]  ? SyS_read+0x210/0x210
[ 1244.524724]  SyS_sendmsg+0x27/0x40
[ 1244.528257]  ? __sys_sendmsg+0x120/0x120
[ 1244.532316]  do_syscall_64+0x1d5/0x640
18:27:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x81, 0x9, 0x20, @mcast2, @private0, 0x20, 0x7c9, 0x4922, 0x8}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:22 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 2)

18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x6072e8a189ec3e98)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4, <r3=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2, 0x5, 0x9, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, @private2, @dev}})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000040))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x6072e8a189ec3e98) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4}, &(0x7f00000000c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2, 0x5, 0x9, 0x80, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, @private2, @dev}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000040)) (async)

[ 1244.536242]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:22 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2)
ioctl$BLKRRPART(r2, 0x125f, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x7fff, 0x1})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0x2, 0x4231})

18:27:22 executing program 3:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x68040, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x8)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x2}, 0x8)

18:27:22 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x81, 0x9, 0x20, @mcast2, @private0, 0x20, 0x7c9, 0x4922, 0x8}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000080))

18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1244.634400] FAULT_INJECTION: forcing a failure.
[ 1244.634400] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.652233] CPU: 0 PID: 28824 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1244.660144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1244.669494] Call Trace:
[ 1244.672088]  dump_stack+0x1b2/0x281
[ 1244.675716]  should_fail.cold+0x10a/0x149
[ 1244.679869]  should_failslab+0xd6/0x130
18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) (async, rerun: 32)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (rerun: 32)

[ 1244.683844]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1244.688950]  __kmalloc_node_track_caller+0x38/0x70
[ 1244.693875]  __alloc_skb+0x96/0x510
[ 1244.697497]  netlink_sendmsg+0x91e/0xbc0
[ 1244.701555]  ? nlmsg_notify+0x1b0/0x1b0
[ 1244.705523]  ? kernel_recvmsg+0x210/0x210
[ 1244.709759]  ? security_socket_sendmsg+0x83/0xb0
[ 1244.714595]  ? nlmsg_notify+0x1b0/0x1b0
[ 1244.718583]  sock_sendmsg+0xb5/0x100
[ 1244.722394]  ___sys_sendmsg+0x6c8/0x800
[ 1244.726363]  ? get_pid_task+0x91/0x130
[ 1244.730250]  ? copy_msghdr_from_user+0x3b0/0x3b0
18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1244.735008]  ? lock_downgrade+0x740/0x740
[ 1244.739161]  ? __fget+0x23e/0x3e0
[ 1244.742614]  ? lock_acquire+0x170/0x3f0
[ 1244.746580]  ? lock_downgrade+0x740/0x740
[ 1244.750986]  ? __fget+0x265/0x3e0
[ 1244.754522]  ? __fdget+0x19b/0x1f0
[ 1244.758053]  ? sockfd_lookup_light+0xb2/0x160
[ 1244.762638]  __sys_sendmsg+0xa3/0x120
[ 1244.766533]  ? SyS_shutdown+0x160/0x160
[ 1244.770505]  ? wait_for_completion_io+0x10/0x10
[ 1244.775176]  ? SyS_read+0x210/0x210
[ 1244.778815]  SyS_sendmsg+0x27/0x40
18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (rerun: 64)

[ 1244.782438]  ? __sys_sendmsg+0x120/0x120
[ 1244.786504]  do_syscall_64+0x1d5/0x640
[ 1244.790390]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:22 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='5\x00', 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x3e}}})
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000080)=0xfffffeed)

18:27:22 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 3)

18:27:22 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (async)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:22 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0))

[ 1244.915346] FAULT_INJECTION: forcing a failure.
[ 1244.915346] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.934821] CPU: 1 PID: 28858 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1244.942801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1244.952149] Call Trace:
[ 1244.954736]  dump_stack+0x1b2/0x281
[ 1244.958364]  should_fail.cold+0x10a/0x149
18:27:22 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:22 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='5\x00', 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x3e}}})
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000080)=0xfffffeed)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async)
write$sysctl(r0, &(0x7f0000000040)='5\x00', 0x2) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x3e}}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000080)=0xfffffeed) (async)

18:27:22 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x30, 0x18, 0x6, 0xc, 0x2, 0x0, 0x4, 0xae, 0xffffffffffffffff})
r0 = socket$inet6(0xa, 0x4, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:22 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)) (async)

[ 1244.962513]  should_failslab+0xd6/0x130
[ 1244.966531]  kmem_cache_alloc+0x40/0x3c0
[ 1244.970595]  skb_clone+0x126/0x9a0
[ 1244.974131]  netlink_deliver_tap+0x67e/0x860
[ 1244.978540]  netlink_unicast+0x485/0x610
[ 1244.982610]  ? netlink_sendskb+0xd0/0xd0
[ 1244.986925]  ? __check_object_size+0x179/0x230
[ 1244.991635]  netlink_sendmsg+0x648/0xbc0
[ 1244.995786]  ? nlmsg_notify+0x1b0/0x1b0
[ 1244.999755]  ? kernel_recvmsg+0x210/0x210
[ 1245.003903]  ? security_socket_sendmsg+0x83/0xb0
[ 1245.008653]  ? nlmsg_notify+0x1b0/0x1b0
18:27:22 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x30, 0x18, 0x6, 0xc, 0x2, 0x0, 0x4, 0xae, 0xffffffffffffffff})
r0 = socket$inet6(0xa, 0x4, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1245.012635]  sock_sendmsg+0xb5/0x100
[ 1245.016344]  ___sys_sendmsg+0x6c8/0x800
[ 1245.020311]  ? get_pid_task+0x91/0x130
[ 1245.024366]  ? copy_msghdr_from_user+0x3b0/0x3b0
[ 1245.029129]  ? lock_downgrade+0x740/0x740
[ 1245.033277]  ? __fget+0x23e/0x3e0
[ 1245.036730]  ? lock_acquire+0x170/0x3f0
[ 1245.040708]  ? lock_downgrade+0x740/0x740
[ 1245.044861]  ? __fget+0x265/0x3e0
[ 1245.048407]  ? __fdget+0x19b/0x1f0
[ 1245.051956]  ? sockfd_lookup_light+0xb2/0x160
[ 1245.056456]  __sys_sendmsg+0xa3/0x120
[ 1245.060260]  ? SyS_shutdown+0x160/0x160
18:27:22 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x30, 0x18, 0x6, 0xc, 0x2, 0x0, 0x4, 0xae, 0xffffffffffffffff}) (async)
r0 = socket$inet6(0xa, 0x4, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3fffd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1245.064230]  ? wait_for_completion_io+0x10/0x10
[ 1245.068901]  ? SyS_read+0x210/0x210
[ 1245.072529]  SyS_sendmsg+0x27/0x40
[ 1245.076059]  ? __sys_sendmsg+0x120/0x120
[ 1245.080116]  do_syscall_64+0x1d5/0x640
[ 1245.084006]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:22 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='5\x00', 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x3e}}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000080)=0xfffffeed)

18:27:22 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 4)

18:27:22 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0))

18:27:22 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3fffd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3fffd) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)

[ 1245.202514] FAULT_INJECTION: forcing a failure.
[ 1245.202514] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.214936] CPU: 0 PID: 28904 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1245.222824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1245.232174] Call Trace:
[ 1245.234769]  dump_stack+0x1b2/0x281
[ 1245.238411]  should_fail.cold+0x10a/0x149
[ 1245.242565]  should_failslab+0xd6/0x130
[ 1245.246546]  kmem_cache_alloc_node+0x263/0x410
[ 1245.251138]  __alloc_skb+0x5c/0x510
[ 1245.254762]  netlink_ack+0x216/0x9a0
[ 1245.258474]  ? netlink_sendmsg+0xbc0/0xbc0
[ 1245.262718]  netlink_rcv_skb+0x2c5/0x390
[ 1245.266778]  ? genl_family_rcv_msg+0xb20/0xb20
[ 1245.271353]  ? netlink_ack+0x9a0/0x9a0
[ 1245.275246]  ? lock_acquire+0x170/0x3f0
[ 1245.279229]  genl_rcv+0x24/0x40
[ 1245.282505]  netlink_unicast+0x437/0x610
[ 1245.286562]  ? netlink_sendskb+0xd0/0xd0
[ 1245.290616]  ? __check_object_size+0x179/0x230
[ 1245.295199]  netlink_sendmsg+0x648/0xbc0
[ 1245.299260]  ? nlmsg_notify+0x1b0/0x1b0
18:27:23 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73)

18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x10000)

18:27:23 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 1)

18:27:23 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x3fffd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1245.303229]  ? kernel_recvmsg+0x210/0x210
[ 1245.307376]  ? security_socket_sendmsg+0x83/0xb0
[ 1245.312157]  ? nlmsg_notify+0x1b0/0x1b0
[ 1245.316132]  sock_sendmsg+0xb5/0x100
[ 1245.319845]  ___sys_sendmsg+0x6c8/0x800
[ 1245.323817]  ? get_pid_task+0x91/0x130
[ 1245.327704]  ? copy_msghdr_from_user+0x3b0/0x3b0
[ 1245.332458]  ? lock_downgrade+0x740/0x740
[ 1245.336638]  ? __fget+0x23e/0x3e0
[ 1245.340105]  ? lock_acquire+0x170/0x3f0
[ 1245.344072]  ? lock_downgrade+0x740/0x740
[ 1245.348220]  ? __fget+0x265/0x3e0
18:27:23 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 5)

18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$l2tp6(0xa, 0x2, 0x73)

[ 1245.351672]  ? __fdget+0x19b/0x1f0
[ 1245.355212]  ? sockfd_lookup_light+0xb2/0x160
[ 1245.359883]  __sys_sendmsg+0xa3/0x120
[ 1245.363677]  ? SyS_shutdown+0x160/0x160
[ 1245.367646]  ? wait_for_completion_io+0x10/0x10
[ 1245.372312]  ? SyS_read+0x210/0x210
[ 1245.375935]  SyS_sendmsg+0x27/0x40
[ 1245.379464]  ? __sys_sendmsg+0x120/0x120
[ 1245.383521]  do_syscall_64+0x1d5/0x640
[ 1245.387407]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x10000)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x101) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x10000) (async)

18:27:23 executing program 1:
openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x49d4)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180))

18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$l2tp6(0xa, 0x2, 0x73)

[ 1245.445367] FAULT_INJECTION: forcing a failure.
[ 1245.445367] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.466736] CPU: 1 PID: 28925 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1245.474632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1245.483985] Call Trace:
[ 1245.486569]  dump_stack+0x1b2/0x281
[ 1245.490195]  should_fail.cold+0x10a/0x149
[ 1245.494347]  should_failslab+0xd6/0x130
[ 1245.498324]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1245.503451]  __kmalloc_node_track_caller+0x38/0x70
[ 1245.508380]  __alloc_skb+0x96/0x510
[ 1245.512007]  netlink_ack+0x216/0x9a0
[ 1245.515715]  ? netlink_sendmsg+0xbc0/0xbc0
[ 1245.519947]  netlink_rcv_skb+0x2c5/0x390
[ 1245.524034]  ? genl_family_rcv_msg+0xb20/0xb20
[ 1245.528612]  ? netlink_ack+0x9a0/0x9a0
[ 1245.532494]  ? lock_acquire+0x170/0x3f0
[ 1245.536471]  genl_rcv+0x24/0x40
[ 1245.539750]  netlink_unicast+0x437/0x610
18:27:23 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x101) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x10000)

[ 1245.543806]  ? netlink_sendskb+0xd0/0xd0
[ 1245.547862]  ? __check_object_size+0x179/0x230
[ 1245.552442]  netlink_sendmsg+0x648/0xbc0
[ 1245.556584]  ? nlmsg_notify+0x1b0/0x1b0
[ 1245.560548]  ? kernel_recvmsg+0x210/0x210
[ 1245.564691]  ? security_socket_sendmsg+0x83/0xb0
[ 1245.569445]  ? nlmsg_notify+0x1b0/0x1b0
[ 1245.573413]  sock_sendmsg+0xb5/0x100
[ 1245.577121]  ___sys_sendmsg+0x6c8/0x800
[ 1245.581110]  ? get_pid_task+0x91/0x130
[ 1245.584992]  ? copy_msghdr_from_user+0x3b0/0x3b0
[ 1245.589748]  ? lock_downgrade+0x740/0x740
18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x450800, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=<r2=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180))
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)

[ 1245.593892]  ? __fget+0x23e/0x3e0
[ 1245.597341]  ? lock_acquire+0x170/0x3f0
[ 1245.601309]  ? lock_downgrade+0x740/0x740
[ 1245.605453]  ? __fget+0x265/0x3e0
[ 1245.608906]  ? __fdget+0x19b/0x1f0
[ 1245.612559]  ? sockfd_lookup_light+0xb2/0x160
[ 1245.617134]  __sys_sendmsg+0xa3/0x120
[ 1245.620936]  ? SyS_shutdown+0x160/0x160
[ 1245.624909]  ? wait_for_completion_io+0x10/0x10
[ 1245.629580]  ? SyS_read+0x210/0x210
[ 1245.633204]  SyS_sendmsg+0x27/0x40
[ 1245.636738]  ? __sys_sendmsg+0x120/0x120
[ 1245.640794]  do_syscall_64+0x1d5/0x640
18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20004800)

[ 1245.644684]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:23 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 6)

[ 1245.699796] FAULT_INJECTION: forcing a failure.
[ 1245.699796] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.716310] CPU: 1 PID: 28931 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1245.724208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1245.733557] Call Trace:
[ 1245.736145]  dump_stack+0x1b2/0x281
[ 1245.739778]  should_fail.cold+0x10a/0x149
[ 1245.743931]  should_failslab+0xd6/0x130
[ 1245.747905]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1245.752553]  loop_add+0x83/0x830
[ 1245.755903]  ? loop_queue_rq+0x280/0x280
[ 1245.759949]  ? loop_queue_work+0x21e0/0x21e0
[ 1245.764334]  loop_control_ioctl+0x11a/0x3f0
[ 1245.768641]  ? loop_lookup+0x190/0x190
[ 1245.772533]  ? SyS_write+0x1b7/0x210
[ 1245.776222]  ? loop_lookup+0x190/0x190
[ 1245.780090]  do_vfs_ioctl+0x75a/0xff0
[ 1245.783871]  ? lock_acquire+0x170/0x3f0
[ 1245.787820]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1245.792203]  ? __fget+0x265/0x3e0
[ 1245.795630]  ? do_vfs_ioctl+0xff0/0xff0
18:27:23 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 2)

18:27:23 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20004800)

[ 1245.799580]  ? security_file_ioctl+0x83/0xb0
[ 1245.803963]  SyS_ioctl+0x7f/0xb0
[ 1245.807304]  ? do_vfs_ioctl+0xff0/0xff0
[ 1245.811265]  do_syscall_64+0x1d5/0x640
[ 1245.815137]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x450800, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=<r2=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180))
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x450800, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)) (async)
ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) (async)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async)

[ 1245.866432] FAULT_INJECTION: forcing a failure.
[ 1245.866432] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.890091] CPU: 0 PID: 28961 Comm: syz-executor.5 Not tainted 4.14.298-syzkaller #0
[ 1245.897984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1245.904922] FAULT_INJECTION: forcing a failure.
[ 1245.904922] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.907425] Call Trace:
[ 1245.907442]  dump_stack+0x1b2/0x281
[ 1245.907457]  should_fail.cold+0x10a/0x149
[ 1245.907474]  should_failslab+0xd6/0x130
[ 1245.907486]  kmem_cache_alloc+0x40/0x3c0
[ 1245.907503]  skb_clone+0x126/0x9a0
[ 1245.940517]  netlink_deliver_tap+0x67e/0x860
[ 1245.944921]  netlink_sendskb+0x45/0xd0
[ 1245.948815]  netlink_unicast+0x50a/0x610
[ 1245.952876]  ? netlink_sendskb+0xd0/0xd0
[ 1245.956952]  ? __nlmsg_put+0x155/0x1c0
[ 1245.960832]  netlink_ack+0x514/0x9a0
18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x20004800)

[ 1245.964536]  ? netlink_sendmsg+0xbc0/0xbc0
[ 1245.968772]  netlink_rcv_skb+0x2c5/0x390
[ 1245.972833]  ? genl_family_rcv_msg+0xb20/0xb20
[ 1245.977415]  ? netlink_ack+0x9a0/0x9a0
[ 1245.981295]  ? lock_acquire+0x170/0x3f0
[ 1245.985254]  genl_rcv+0x24/0x40
[ 1245.988562]  netlink_unicast+0x437/0x610
[ 1245.992618]  ? netlink_sendskb+0xd0/0xd0
[ 1245.996770]  ? __check_object_size+0x179/0x230
[ 1246.001348]  netlink_sendmsg+0x648/0xbc0
[ 1246.005581]  ? nlmsg_notify+0x1b0/0x1b0
[ 1246.009553]  ? kernel_recvmsg+0x210/0x210
[ 1246.013690]  ? security_socket_sendmsg+0x83/0xb0
[ 1246.018456]  ? nlmsg_notify+0x1b0/0x1b0
[ 1246.022427]  sock_sendmsg+0xb5/0x100
[ 1246.026133]  ___sys_sendmsg+0x6c8/0x800
[ 1246.030111]  ? get_pid_task+0x91/0x130
[ 1246.033998]  ? copy_msghdr_from_user+0x3b0/0x3b0
[ 1246.038767]  ? lock_downgrade+0x740/0x740
[ 1246.042901]  ? __fget+0x23e/0x3e0
[ 1246.046338]  ? lock_acquire+0x170/0x3f0
[ 1246.050297]  ? lock_downgrade+0x740/0x740
[ 1246.054525]  ? __fget+0x265/0x3e0
[ 1246.058053]  ? __fdget+0x19b/0x1f0
[ 1246.061672]  ? sockfd_lookup_light+0xb2/0x160
[ 1246.066158]  __sys_sendmsg+0xa3/0x120
[ 1246.069953]  ? SyS_shutdown+0x160/0x160
[ 1246.073924]  ? wait_for_completion_io+0x10/0x10
[ 1246.078586]  ? SyS_read+0x210/0x210
[ 1246.082201]  SyS_sendmsg+0x27/0x40
[ 1246.085811]  ? __sys_sendmsg+0x120/0x120
[ 1246.089875]  do_syscall_64+0x1d5/0x640
[ 1246.093758]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1246.098979] CPU: 1 PID: 28968 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1246.106862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1246.116649] Call Trace:
[ 1246.119247]  dump_stack+0x1b2/0x281
[ 1246.122888]  should_fail.cold+0x10a/0x149
[ 1246.127045]  should_failslab+0xd6/0x130
[ 1246.131019]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1246.132212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1246.136124]  __kmalloc_node+0x38/0x70
[ 1246.136138]  blk_mq_alloc_tag_set+0x27c/0x910
[ 1246.136153]  loop_add+0x2a0/0x830
[ 1246.156502]  ? loop_queue_rq+0x280/0x280
[ 1246.160545]  ? loop_queue_work+0x21e0/0x21e0
[ 1246.164936]  loop_control_ioctl+0x11a/0x3f0
[ 1246.169239]  ? loop_lookup+0x190/0x190
[ 1246.173105]  ? SyS_write+0x1b7/0x210
[ 1246.176802]  ? loop_lookup+0x190/0x190
[ 1246.181021]  do_vfs_ioctl+0x75a/0xff0
[ 1246.184799]  ? lock_acquire+0x170/0x3f0
[ 1246.188750]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1246.193137]  ? __fget+0x265/0x3e0
[ 1246.196574]  ? do_vfs_ioctl+0xff0/0xff0
[ 1246.200535]  ? security_file_ioctl+0x83/0xb0
[ 1246.204921]  SyS_ioctl+0x7f/0xb0
[ 1246.208260]  ? do_vfs_ioctl+0xff0/0xff0
[ 1246.212346]  do_syscall_64+0x1d5/0x640
18:27:23 executing program 1:
openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) (async, rerun: 64)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x49d4)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180))

18:27:23 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:23 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x450800, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async, rerun: 64)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (rerun: 64)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async, rerun: 64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=<r2=>0xffffffffffffffff) (rerun: 64)
ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) (async, rerun: 64)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)

18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r3=>0x0, 0x29, 0x1, 0x5, 0xcb1b, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, 0xff80, 0x8, 0x6, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x0, 0x2, 0x4, 0x14, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f81, 0x8, 0x1, 0x7}})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4)

18:27:23 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (fail_nth: 7)

18:27:23 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 3)

[ 1246.216214]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:23 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r3=>0x0, 0x29, 0x1, 0x5, 0xcb1b, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, 0xff80, 0x8, 0x6, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x0, 0x2, 0x4, 0x14, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f81, 0x8, 0x1, 0x7}})
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x5, 0xcb1b, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, 0xff80, 0x8, 0x6, 0x5}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x0, 0x2, 0x4, 0x14, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f81, 0x8, 0x1, 0x7}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14) (async)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

18:27:23 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0xffff, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="160000006ea58e17bfe9ac2c02e4071ec36ca9928c6bf32337c62348b86ad768f8deb2a580f0beb23f3807af15cbd0ba3b84b4bfd798bfcbe5da6ae9dd7b6a9f2699c97c3bb83b0ab1b0428d0ee9179312b82aa3cf79f9a927625160e21ef1", @ANYRES16=r0, @ANYBLOB="110100000000000000000c677e6c0b60e530fbf6ceff"], 0x1c}}, 0x0)

18:27:24 executing program 1:
openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x49d4)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180))
openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x49d4) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000180)) (async)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r3=>0x0, 0x29, 0x1, 0x5, 0xcb1b, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, 0xff80, 0x8, 0x6, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x4, 0x0, 0x2, 0x4, 0x14, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f81, 0x8, 0x1, 0x7}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14) (rerun: 64)
getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4)

18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0xffff, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="160000006ea58e17bfe9ac2c02e4071ec36ca9928c6bf32337c62348b86ad768f8deb2a580f0beb23f3807af15cbd0ba3b84b4bfd798bfcbe5da6ae9dd7b6a9f2699c97c3bb83b0ab1b0428d0ee9179312b82aa3cf79f9a927625160e21ef1", @ANYRES16=r0, @ANYBLOB="110100000000000000000c677e6c0b60e530fbf6ceff"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0xffff, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="160000006ea58e17bfe9ac2c02e4071ec36ca9928c6bf32337c62348b86ad768f8deb2a580f0beb23f3807af15cbd0ba3b84b4bfd798bfcbe5da6ae9dd7b6a9f2699c97c3bb83b0ab1b0428d0ee9179312b82aa3cf79f9a927625160e21ef1", @ANYRES16=r0, @ANYBLOB="110100000000000000000c677e6c0b60e530fbf6ceff"], 0x1c}}, 0x0) (async)

[ 1246.326474] FAULT_INJECTION: forcing a failure.
[ 1246.326474] name failslab, interval 1, probability 0, space 0, times 0
[ 1246.363058] CPU: 1 PID: 29000 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1246.370962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1246.380315] Call Trace:
[ 1246.382906]  dump_stack+0x1b2/0x281
[ 1246.386537]  should_fail.cold+0x10a/0x149
[ 1246.390704]  should_failslab+0xd6/0x130
[ 1246.394729]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1246.399840]  __kmalloc_node+0x38/0x70
[ 1246.403650]  blk_mq_alloc_tag_set+0x30f/0x910
[ 1246.408270]  loop_add+0x2a0/0x830
[ 1246.411734]  ? loop_queue_rq+0x280/0x280
[ 1246.415797]  ? loop_queue_work+0x21e0/0x21e0
[ 1246.420239]  loop_control_ioctl+0x11a/0x3f0
18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1246.424561]  ? loop_lookup+0x190/0x190
[ 1246.428627]  ? SyS_write+0x1b7/0x210
[ 1246.432341]  ? loop_lookup+0x190/0x190
[ 1246.436226]  do_vfs_ioctl+0x75a/0xff0
[ 1246.440026]  ? lock_acquire+0x170/0x3f0
[ 1246.443272] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1246.444001]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1246.444013]  ? __fget+0x265/0x3e0
[ 1246.444024]  ? do_vfs_ioctl+0xff0/0xff0
[ 1246.464421]  ? security_file_ioctl+0x83/0xb0
[ 1246.468835]  SyS_ioctl+0x7f/0xb0
[ 1246.472205]  ? do_vfs_ioctl+0xff0/0xff0
18:27:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25000000000c000f00060000000000000005000d000100000000000000000000020000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x8040)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180))

18:27:24 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00f586", @ANYRES16=r3, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000c6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

18:27:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async, rerun: 64)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25000000000c000f00060000000000000005000d000100000000000000000000020000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x8040)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180))

18:27:24 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 4)

[ 1246.476189]  do_syscall_64+0x1d5/0x640
[ 1246.480084]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0xffff, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="160000006ea58e17bfe9ac2c02e4071ec36ca9928c6bf32337c62348b86ad768f8deb2a580f0beb23f3807af15cbd0ba3b84b4bfd798bfcbe5da6ae9dd7b6a9f2699c97c3bb83b0ab1b0428d0ee9179312b82aa3cf79f9a927625160e21ef1", @ANYRES16=r0, @ANYBLOB="110100000000000000000c677e6c0b60e530fbf6ceff"], 0x1c}}, 0x0)

18:27:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25000000000c000f00060000000000000005000d000100000000000000000000020000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x8040)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25000000000c000f00060000000000000005000d000100000000000000000000020000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x8040) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, &(0x7f0000000180)) (async)

18:27:24 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x86481, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x20)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1246.590805] FAULT_INJECTION: forcing a failure.
[ 1246.590805] name failslab, interval 1, probability 0, space 0, times 0
[ 1246.631153] CPU: 0 PID: 29038 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1246.639059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1246.648433] Call Trace:
[ 1246.651025]  dump_stack+0x1b2/0x281
[ 1246.654656]  should_fail.cold+0x10a/0x149
[ 1246.658804]  should_failslab+0xd6/0x130
[ 1246.662777]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1246.667882]  blk_mq_init_tags+0x5e/0x280
[ 1246.671946]  blk_mq_alloc_rq_map+0x90/0x220
[ 1246.676269]  __blk_mq_alloc_rq_map+0xa3/0x3a0
18:27:24 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000180)=0xffffffffffffff0a)

18:27:24 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000180)=0xffffffffffffff0a)

18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x4054840)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020029bd7000ffdbd6250100000024000380060007004e220000080001000000000005000800010000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x9512ff9219240c0c}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c00c}, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c)

[ 1246.680681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1246.680765]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1246.693818]  loop_add+0x2a0/0x830
[ 1246.697270]  ? loop_queue_rq+0x280/0x280
[ 1246.701327]  ? loop_queue_work+0x21e0/0x21e0
[ 1246.705738]  loop_control_ioctl+0x11a/0x3f0
[ 1246.710052]  ? loop_lookup+0x190/0x190
[ 1246.713935]  ? SyS_write+0x1b7/0x210
[ 1246.717648]  ? loop_lookup+0x190/0x190
[ 1246.721532]  do_vfs_ioctl+0x75a/0xff0
[ 1246.725329]  ? lock_acquire+0x170/0x3f0
18:27:24 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000180)=0xffffffffffffff0a)

18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

18:27:24 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00f586", @ANYRES16=r3, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000c6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100)) (async, rerun: 64)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)

[ 1246.729302]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1246.733711]  ? __fget+0x265/0x3e0
[ 1246.737172]  ? do_vfs_ioctl+0xff0/0xff0
[ 1246.741227]  ? security_file_ioctl+0x83/0xb0
[ 1246.745634]  SyS_ioctl+0x7f/0xb0
[ 1246.748992]  ? do_vfs_ioctl+0xff0/0xff0
[ 1246.752974]  do_syscall_64+0x1d5/0x640
[ 1246.756888]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1246.770951] blk-mq: reduced tag depth (128 -> 64)
18:27:24 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 5)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async)

18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x4054840) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020029bd7000ffdbd6250100000024000380060007004e220000080001000000000005000800010000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x9512ff9219240c0c}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (rerun: 64)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c00c}, 0x0) (async)
read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c)

18:27:24 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x86481, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x20) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)

18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x4054840)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020029bd7000ffdbd6250100000024000380060007004e220000080001000000000005000800010000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x9512ff9219240c0c}, 0x40) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c00c}, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c)

18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

[ 1246.968697] FAULT_INJECTION: forcing a failure.
[ 1246.968697] name failslab, interval 1, probability 0, space 0, times 0
[ 1246.994990] CPU: 0 PID: 29100 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1247.002898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1247.012258] Call Trace:
[ 1247.014854]  dump_stack+0x1b2/0x281
18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

[ 1247.018483]  should_fail.cold+0x10a/0x149
[ 1247.022639]  should_failslab+0xd6/0x130
[ 1247.026788]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1247.031904]  __kmalloc_node+0x38/0x70
[ 1247.035718]  sbitmap_init_node+0x10c/0x3d0
[ 1247.039956]  sbitmap_queue_init_node+0x37/0x5d0
[ 1247.044648]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 1247.049664]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1247.054941]  blk_mq_init_tags+0xf4/0x280
[ 1247.059002]  blk_mq_alloc_rq_map+0x90/0x220
[ 1247.063322]  __blk_mq_alloc_rq_map+0xa3/0x3a0
18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1247.067814]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1247.072309]  loop_add+0x2a0/0x830
[ 1247.075846]  ? loop_queue_rq+0x280/0x280
[ 1247.079900]  ? loop_queue_work+0x21e0/0x21e0
[ 1247.084481]  loop_control_ioctl+0x11a/0x3f0
[ 1247.088802]  ? loop_lookup+0x190/0x190
[ 1247.092771]  ? SyS_write+0x1b7/0x210
[ 1247.096480]  ? loop_lookup+0x190/0x190
[ 1247.100365]  do_vfs_ioctl+0x75a/0xff0
[ 1247.104337]  ? lock_acquire+0x170/0x3f0
[ 1247.108308]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1247.112725]  ? __fget+0x265/0x3e0
18:27:24 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

18:27:24 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00f586", @ANYRES16=r3, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000c6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100)) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14)

18:27:24 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 6)

[ 1247.116182]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.120261]  ? security_file_ioctl+0x83/0xb0
[ 1247.124671]  SyS_ioctl+0x7f/0xb0
[ 1247.128033]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.132006]  do_syscall_64+0x1d5/0x640
[ 1247.135899]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1247.145643] blk-mq: reduced tag depth (128 -> 64)
18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000081)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60044000}, 0x4004800)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14)

18:27:24 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x86481, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x20)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000081)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60044000}, 0x4004800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000081) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60044000}, 0x4004800) (async)

18:27:24 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14) (async)

18:27:24 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1247.314015] FAULT_INJECTION: forcing a failure.
[ 1247.314015] name failslab, interval 1, probability 0, space 0, times 0
[ 1247.345621] CPU: 1 PID: 29143 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1247.353518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1247.362867] Call Trace:
[ 1247.365459]  dump_stack+0x1b2/0x281
[ 1247.369099]  should_fail.cold+0x10a/0x149
[ 1247.373248]  should_failslab+0xd6/0x130
[ 1247.377221]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1247.380601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1247.382320]  sbitmap_queue_init_node+0x27f/0x5d0
[ 1247.382345]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1247.382359]  blk_mq_init_tags+0xf4/0x280
[ 1247.405415]  blk_mq_alloc_rq_map+0x90/0x220
[ 1247.409736]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 1247.414233]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1247.418731]  loop_add+0x2a0/0x830
[ 1247.422177]  ? loop_queue_rq+0x280/0x280
[ 1247.426228]  ? loop_queue_work+0x21e0/0x21e0
[ 1247.430638]  loop_control_ioctl+0x11a/0x3f0
[ 1247.434951]  ? loop_lookup+0x190/0x190
[ 1247.438856]  ? SyS_write+0x1b7/0x210
[ 1247.442574]  ? loop_lookup+0x190/0x190
[ 1247.446456]  do_vfs_ioctl+0x75a/0xff0
[ 1247.450249]  ? lock_acquire+0x170/0x3f0
[ 1247.452034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xccc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2504000000060002000100000008001900e000000106000e0009000000050007000200000014001f00fe8000000000000000000000000000aa06201a004e200400050005000000000006001d000500000008001800ac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x2000c081}, 0x24000000)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x9, 0x8})
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3, 0xd96})
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$ndb(0x0, 0x0, 0x2000)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1048094}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x54)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x0)
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000280)={0x1f, 0xf46})
r6 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0)

18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:25 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xccc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2504000000060002000100000008001900e000000106000e0009000000050007000200000014001f00fe8000000000000000000000000000aa06201a004e200400050005000000000006001d000500000008001800ac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x2000c081}, 0x24000000)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x9, 0x8})
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3, 0xd96})
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$ndb(0x0, 0x0, 0x2000)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1048094}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x54)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x0)
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000280)={0x1f, 0xf46})
r6 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xccc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2504000000060002000100000008001900e000000106000e0009000000050007000200000014001f00fe8000000000000000000000000000aa06201a004e200400050005000000000006001d000500000008001800ac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x2000c081}, 0x24000000) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x9, 0x8}) (async)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3, 0xd96}) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
syz_open_dev$ndb(0x0, 0x0, 0x2000) (async)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1048094}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x54) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) (async)
prctl$PR_SET_FPEXC(0xc, 0x0) (async)
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000280)={0x1f, 0xf46}) (async)
getpid() (async)
prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0) (async)

18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1247.454211]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1247.454224]  ? __fget+0x265/0x3e0
[ 1247.454236]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.454248]  ? security_file_ioctl+0x83/0xb0
[ 1247.479075]  SyS_ioctl+0x7f/0xb0
[ 1247.482447]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.486425]  do_syscall_64+0x1d5/0x640
[ 1247.490320]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:25 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 7)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xc4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xccc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2504000000060002000100000008001900e000000106000e0009000000050007000200000014001f00fe8000000000000000000000000000aa06201a004e200400050005000000000006001d000500000008001800ac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x2000c081}, 0x24000000) (async)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x9, 0x8}) (async)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3, 0xd96}) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
r5 = syz_open_dev$ndb(0x0, 0x0, 0x2000)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1048094}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x110, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x54) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) (async)
prctl$PR_SET_FPEXC(0xc, 0x0) (async, rerun: 64)
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000280)={0x1f, 0xf46}) (async, rerun: 64)
r6 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x2, 0x0)

18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000081)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60044000}, 0x4004800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x20000081) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r0, 0x111}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60044000}, 0x4004800) (async)

[ 1247.511491] blk-mq: reduced tag depth (128 -> 64)
18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60e000, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x448000, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x253}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf52}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa680}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}]}]}, 0x68}}, 0x0)

18:27:25 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x2)

18:27:25 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x2) (async)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x618, 0x3ff, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xebe}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008040)
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))

[ 1247.636063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x253}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf52}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa680}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}]}]}, 0x68}}, 0x0)

[ 1247.703329] FAULT_INJECTION: forcing a failure.
[ 1247.703329] name failslab, interval 1, probability 0, space 0, times 0
[ 1247.733744] CPU: 0 PID: 29219 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1247.741646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1247.750996] Call Trace:
18:27:25 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006"], 0x2c}}, 0x0)

18:27:25 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006007847"], 0x2c}}, 0x0)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x618, 0x3ff, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xebe}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008040) (async, rerun: 32)
ioctl$RTC_PIE_ON(r1, 0x7005) (rerun: 32)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))

[ 1247.753584]  dump_stack+0x1b2/0x281
[ 1247.757224]  should_fail.cold+0x10a/0x149
[ 1247.761381]  should_failslab+0xd6/0x130
[ 1247.765356]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1247.770463]  sbitmap_queue_init_node+0x27f/0x5d0
[ 1247.775217]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1247.780501]  blk_mq_init_tags+0x14b/0x280
[ 1247.784648]  blk_mq_alloc_rq_map+0x90/0x220
[ 1247.788976]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 1247.793675]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1247.798176]  loop_add+0x2a0/0x830
[ 1247.801630]  ? loop_queue_rq+0x280/0x280
[ 1247.805682]  ? loop_queue_work+0x21e0/0x21e0
[ 1247.810092]  loop_control_ioctl+0x11a/0x3f0
[ 1247.814412]  ? loop_lookup+0x190/0x190
[ 1247.818293]  ? SyS_write+0x1b7/0x210
[ 1247.822008]  ? loop_lookup+0x190/0x190
[ 1247.825897]  do_vfs_ioctl+0x75a/0xff0
[ 1247.829703]  ? lock_acquire+0x170/0x3f0
[ 1247.833683]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1247.838088]  ? __fget+0x265/0x3e0
[ 1247.841537]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.845509]  ? security_file_ioctl+0x83/0xb0
[ 1247.849924]  SyS_ioctl+0x7f/0xb0
18:27:25 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 8)

18:27:25 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006007847"], 0x2c}}, 0x0)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x618, 0x3ff, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xebe}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008040)
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000))

18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60e000, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x448000, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60e000, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x448000, 0x0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:25 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)=0x2)

[ 1247.853284]  ? do_vfs_ioctl+0xff0/0xff0
[ 1247.858343]  do_syscall_64+0x1d5/0x640
[ 1247.862228]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1247.881803] blk-mq: reduced tag depth (128 -> 64)
18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x253}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf52}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa680}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}]}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x253}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf52}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa680}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd5a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}]}]}, 0x68}}, 0x0) (async)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044084}, 0x4000080)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x804)

18:27:25 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x3)

18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="356c34a11c0003236e410a2305d4f41dbc2fcb607b0f482134e3bf17338cbc6f07f788e97870ef711e7e3722a6578236ff13c5a1cac1c082531cb60b3cd9c0f5e805cee77977b14af4746753efa2ee53d229fe58e1d2a957cb07433fcce1548e6f2161299783c50b38148387fcb7cc3d30f2c154d126c501e40934feb50983848a9a4b7455e9cb6054d21af0d8b4de9ecf18f7aa3e7f9e7734621a4360d1f3c7d4541a2abe9fe40ef679fea119f872751e8af16f8c8605b56f82d18742cceba465655654d92f966a885400930830a6f7b9d3d0fd9c458948cf62db96e1953ca3fea8082d4682b5ce0e264aa45c2415c70e0a2d47a9f80e171754c521ae2e662bb05b4e70fc250b19879f34a4ff1169545d322bd62dd1de8b3cfcbcb9c042722fff3ec5e1445d0fd38c0814cc53a73d60d94ce73a0af5983c334673d49c826c1b7e2cbce95c34beeb60d918dc4baad0f6cb7169623f4f599c094c4153ec8ca19e6047ad49397ffbeefcbb1b725ec97c4d05fb6a2ad21a522051d371a2bb34a69ac166f84ece96680ebb550d78696e0662b1ba0302b81738579713c64617d6c23f34195bf1ac22aaf4f8162f47ff5268f555143c0a1795bb32e3e309680f36b27ebebd743cc0e6d4cea86577db268d672d1a65318ddaead848eeda734e38e060d4586baceba526e35e724070aea630819403c9c0bebeb75db2b9e5bff80254497da923cf5d1892056c5ed749ac4e02c6611c90f0bbdb1c014a3314c8d328b3eec4c8", @ANYRES16=r0, @ANYRESOCT=r0], 0x1c}}, 0x24008095)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044084}, 0x4000080) (async)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x804)

[ 1248.061178] FAULT_INJECTION: forcing a failure.
[ 1248.061178] name failslab, interval 1, probability 0, space 0, times 0
[ 1248.083528] CPU: 1 PID: 29263 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1248.091598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1248.100947] Call Trace:
[ 1248.103535]  dump_stack+0x1b2/0x281
[ 1248.107165]  should_fail.cold+0x10a/0x149
[ 1248.111318]  should_failslab+0xd6/0x130
[ 1248.115297]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1248.120404]  __kmalloc_node+0x38/0x70
[ 1248.124203]  blk_mq_alloc_rq_map+0xd2/0x220
[ 1248.128523]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 1248.133018]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1248.137562]  loop_add+0x2a0/0x830
[ 1248.141014]  ? loop_queue_rq+0x280/0x280
[ 1248.145068]  ? loop_queue_work+0x21e0/0x21e0
[ 1248.149479]  loop_control_ioctl+0x11a/0x3f0
[ 1248.153806]  ? loop_lookup+0x190/0x190
[ 1248.157686]  ? SyS_write+0x1b7/0x210
18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x60e000, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x448000, 0x0) (async, rerun: 32)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 32)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))

[ 1248.161397]  ? loop_lookup+0x190/0x190
[ 1248.165368]  do_vfs_ioctl+0x75a/0xff0
[ 1248.169173]  ? lock_acquire+0x170/0x3f0
[ 1248.173145]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1248.177560]  ? __fget+0x265/0x3e0
[ 1248.181193]  ? do_vfs_ioctl+0xff0/0xff0
[ 1248.185165]  ? security_file_ioctl+0x83/0xb0
[ 1248.189574]  SyS_ioctl+0x7f/0xb0
[ 1248.192942]  ? do_vfs_ioctl+0xff0/0xff0
[ 1248.196916]  do_syscall_64+0x1d5/0x640
[ 1248.200798]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1248.208911] blk-mq: reduced tag depth (128 -> 64)
18:27:25 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 9)

18:27:25 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000400000000000800050000000000080006007847"], 0x2c}}, 0x0)

18:27:25 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async)

18:27:25 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x3)

18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0], 0x1c}}, 0x24008095)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0], 0x1c}}, 0x24008095) (async)

18:27:25 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044084}, 0x4000080)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x804)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000)) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044084}, 0x4000080) (async)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x804) (async)

18:27:25 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x38, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0], 0x1c}}, 0x24008095)

18:27:26 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x3)

18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))

[ 1248.351887] FAULT_INJECTION: forcing a failure.
[ 1248.351887] name failslab, interval 1, probability 0, space 0, times 0
18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0) (async)

18:27:26 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async)

[ 1248.401102] CPU: 0 PID: 29307 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1248.409001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1248.418450] Call Trace:
[ 1248.421040]  dump_stack+0x1b2/0x281
[ 1248.424677]  should_fail.cold+0x10a/0x149
[ 1248.428825]  should_failslab+0xd6/0x130
[ 1248.432798]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1248.437902]  __kmalloc_node+0x38/0x70
[ 1248.441703]  blk_mq_alloc_rq_map+0x113/0x220
[ 1248.446109]  __blk_mq_alloc_rq_map+0xa3/0x3a0
[ 1248.450631]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1248.455127]  loop_add+0x2a0/0x830
[ 1248.458579]  ? loop_queue_rq+0x280/0x280
[ 1248.462811]  ? loop_queue_work+0x21e0/0x21e0
[ 1248.467229]  loop_control_ioctl+0x11a/0x3f0
[ 1248.471549]  ? loop_lookup+0x190/0x190
[ 1248.475433]  ? SyS_write+0x1b7/0x210
[ 1248.479238]  ? loop_lookup+0x190/0x190
[ 1248.483123]  do_vfs_ioctl+0x75a/0xff0
[ 1248.486931]  ? lock_acquire+0x170/0x3f0
[ 1248.490900]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1248.495306]  ? __fget+0x265/0x3e0
18:27:26 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 10)

18:27:26 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xdffffff9, 0x0, 0xfffffffffffffffd, 0x200, r1})
r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private0, <r4=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x0, 0x4, 0x3, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x80000001, 0x3}})
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040))
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x8, 0xdd2d, 0x0, 0x3})
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:26 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768"], 0x2c}}, 0x0)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))

18:27:26 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1248.498844]  ? do_vfs_ioctl+0xff0/0xff0
[ 1248.502820]  ? security_file_ioctl+0x83/0xb0
[ 1248.507225]  SyS_ioctl+0x7f/0xb0
[ 1248.510584]  ? do_vfs_ioctl+0xff0/0xff0
[ 1248.514548]  do_syscall_64+0x1d5/0x640
[ 1248.518447]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1248.529696] blk-mq: reduced tag depth (128 -> 64)
18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0) (async)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000000))

18:27:26 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:26 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768"], 0x2c}}, 0x0)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf2505000000050014006f00000005001200c200000006001a004e23000008000a66610100000208000a000200000005001300030000000500060000000000080018007f00000105001400f8000000"], 0x5c}}, 0xc0)

18:27:26 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xdffffff9, 0x0, 0xfffffffffffffffd, 0x200, r1})
r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private0, <r4=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x0, 0x4, 0x3, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x80000001, 0x3}})
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040))
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x8, 0xdd2d, 0x0, 0x3})
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000080)=0x101)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
getpid() (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xdffffff9, 0x0, 0xfffffffffffffffd, 0x200, r1}) (async)
syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000) (async)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0)) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private0}, &(0x7f0000000140)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x0, 0x4, 0x3, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x80000001, 0x3}}) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x8, 0xdd2d, 0x0, 0x3}) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000080)=0x101) (async)

[ 1248.714681] FAULT_INJECTION: forcing a failure.
[ 1248.714681] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1248.742060] CPU: 0 PID: 29367 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1248.750049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1248.759401] Call Trace:
[ 1248.761998]  dump_stack+0x1b2/0x281
[ 1248.765625]  should_fail.cold+0x10a/0x149
[ 1248.769779]  __alloc_pages_nodemask+0x21e/0x2900
[ 1248.774549]  ? __kmalloc_node+0x4c/0x70
[ 1248.778533]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 1248.783637]  ? blk_mq_alloc_tag_set+0x4ac/0x910
[ 1248.788310]  ? loop_add+0x2a0/0x830
[ 1248.791934]  ? loop_control_ioctl+0x11a/0x3f0
[ 1248.796426]  ? do_syscall_64+0x1d5/0x640
[ 1248.800485]  ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1248.805849]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1248.810689]  ? fs_reclaim_release+0xd0/0x110
[ 1248.815269]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1248.820112]  ? __lockdep_init_map+0x100/0x560
[ 1248.824585]  ? _find_next_bit+0xdb/0x100
[ 1248.828633]  ? __cpu_to_node+0x7b/0xa0
[ 1248.832504]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[ 1248.837234]  blk_mq_alloc_rqs+0x227/0x6d0
[ 1248.842977]  ? blk_mq_alloc_rq_map+0x9d/0x220
[ 1248.847468]  __blk_mq_alloc_rq_map+0x15b/0x3a0
[ 1248.852170]  blk_mq_alloc_tag_set+0x4ac/0x910
[ 1248.856661]  loop_add+0x2a0/0x830
[ 1248.860112]  ? loop_queue_rq+0x280/0x280
[ 1248.864158]  ? loop_queue_work+0x21e0/0x21e0
[ 1248.868555]  loop_control_ioctl+0x11a/0x3f0
[ 1248.872868]  ? loop_lookup+0x190/0x190
[ 1248.876820]  ? SyS_write+0x1b7/0x210
[ 1248.880510]  ? loop_lookup+0x190/0x190
[ 1248.884396]  do_vfs_ioctl+0x75a/0xff0
[ 1248.888196]  ? lock_acquire+0x170/0x3f0
[ 1248.892155]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1248.896545]  ? __fget+0x265/0x3e0
[ 1248.899978]  ? do_vfs_ioctl+0xff0/0xff0
[ 1248.903931]  ? security_file_ioctl+0x83/0xb0
[ 1248.908326]  SyS_ioctl+0x7f/0xb0
[ 1248.911779]  ? do_vfs_ioctl+0xff0/0xff0
18:27:26 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 11)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf2505000000050014006f00000005001200c200000006001a004e23000008000a66610100000208000a000200000005001300030000000500060000000000080018007f00000105001400f8000000"], 0x5c}}, 0xc0)

18:27:26 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:26 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000080005000000000008000600784768"], 0x2c}}, 0x0)

18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:26 executing program 3:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = getpid()
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xdffffff9, 0x0, 0xfffffffffffffffd, 0x200, r1})
r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private0, <r4=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x0, 0x4, 0x3, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x80000001, 0x3}})
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040))
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x8, 0xdd2d, 0x0, 0x3})
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000080)=0x101)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
getpid() (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0xdffffff9, 0x0, 0xfffffffffffffffd, 0x200, r1}) (async)
syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000) (async)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000002c0)) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private0}, &(0x7f0000000140)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x29, 0x0, 0x4, 0x3, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x80000001, 0x3}}) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x8, 0xdd2d, 0x0, 0x3}) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000080)=0x101) (async)

[ 1248.915732]  do_syscall_64+0x1d5/0x640
[ 1248.919604]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:26 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x101)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x86000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf2505000000050014006f00000005001200c200000006001a004e23000008000a66610100000208000a000200000005001300030000000500060000000000080018007f00000105001400f8000000"], 0x5c}}, 0xc0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf2505000000050014006f00000005001200c200000006001a004e23000008000a66610100000208000a000200000005001300030000000500060000000000080018007f00000105001400f8000000"], 0x5c}}, 0xc0) (async)

18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:26 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x101) (async)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x86000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)

18:27:26 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x381200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x3)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffff)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1249.063578] FAULT_INJECTION: forcing a failure.
[ 1249.063578] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.103852] CPU: 1 PID: 29409 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1249.111755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1249.121107] Call Trace:
[ 1249.123700]  dump_stack+0x1b2/0x281
[ 1249.127327]  should_fail.cold+0x10a/0x149
[ 1249.131476]  should_failslab+0xd6/0x130
[ 1249.135575]  kmem_cache_alloc_node+0x263/0x410
[ 1249.140158]  blk_alloc_queue_node+0x2d/0xb40
[ 1249.144749]  blk_mq_init_queue+0x42/0x90
[ 1249.148807]  loop_add+0x303/0x830
[ 1249.152259]  ? loop_queue_rq+0x280/0x280
[ 1249.156296]  ? loop_queue_work+0x21e0/0x21e0
[ 1249.160694]  loop_control_ioctl+0x11a/0x3f0
[ 1249.164994]  ? loop_lookup+0x190/0x190
[ 1249.168869]  ? SyS_write+0x1b7/0x210
[ 1249.172563]  ? loop_lookup+0x190/0x190
[ 1249.176436]  do_vfs_ioctl+0x75a/0xff0
[ 1249.180228]  ? lock_acquire+0x170/0x3f0
[ 1249.184179]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1249.188565]  ? __fget+0x265/0x3e0
[ 1249.192004]  ? do_vfs_ioctl+0xff0/0xff0
[ 1249.195957]  ? security_file_ioctl+0x83/0xb0
[ 1249.200341]  SyS_ioctl+0x7f/0xb0
18:27:26 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 12)

18:27:26 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x381200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x3) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffff)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:26 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:26 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4e1fc4f3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1249.203694]  ? do_vfs_ioctl+0xff0/0xff0
[ 1249.207642]  do_syscall_64+0x1d5/0x640
[ 1249.211507]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:26 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) (async)

18:27:27 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)

[ 1249.289245] FAULT_INJECTION: forcing a failure.
[ 1249.289245] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1249.301061] CPU: 1 PID: 29451 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1249.308943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1249.318287] Call Trace:
[ 1249.320870]  dump_stack+0x1b2/0x281
[ 1249.324496]  should_fail.cold+0x10a/0x149
[ 1249.328651]  __alloc_pages_nodemask+0x21e/0x2900
[ 1249.333402]  ? __alloc_pages_nodemask+0x1a8b/0x2900
18:27:27 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1249.338417]  ? __kmalloc_node+0x4c/0x70
[ 1249.342388]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 1249.346972]  ? __lock_acquire+0x5fc/0x3f20
[ 1249.351295]  ? fs_reclaim_release+0xd0/0x110
[ 1249.355696]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1249.360620]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1249.365578]  ? __lockdep_init_map+0x100/0x560
[ 1249.370069]  ? _find_next_bit+0xdb/0x100
[ 1249.374129]  ? __cpu_to_node+0x7b/0xa0
[ 1249.378028]  cache_grow_begin+0x91/0x700
[ 1249.382079]  ? fs_reclaim_release+0xd0/0x110
18:27:27 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:27 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1249.386480]  ? check_preemption_disabled+0x35/0x240
[ 1249.391494]  cache_alloc_refill+0x273/0x350
[ 1249.395819]  kmem_cache_alloc_node+0x3f5/0x410
[ 1249.400400]  blk_alloc_queue_node+0x2d/0xb40
[ 1249.404810]  blk_mq_init_queue+0x42/0x90
[ 1249.408863]  loop_add+0x303/0x830
[ 1249.412311]  ? loop_queue_rq+0x280/0x280
[ 1249.416371]  ? loop_queue_work+0x21e0/0x21e0
[ 1249.420789]  loop_control_ioctl+0x11a/0x3f0
[ 1249.425109]  ? loop_lookup+0x190/0x190
[ 1249.428990]  ? SyS_write+0x1b7/0x210
[ 1249.432710]  ? loop_lookup+0x190/0x190
18:27:27 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x101) (async)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x86000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:27 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:27 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x381200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x3) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffff) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:27 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 13)

18:27:27 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4e1fc4f3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4e1fc4f3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

[ 1249.436593]  do_vfs_ioctl+0x75a/0xff0
[ 1249.440400]  ? lock_acquire+0x170/0x3f0
[ 1249.444373]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1249.448783]  ? __fget+0x265/0x3e0
[ 1249.452236]  ? do_vfs_ioctl+0xff0/0xff0
[ 1249.456211]  ? security_file_ioctl+0x83/0xb0
[ 1249.460685]  SyS_ioctl+0x7f/0xb0
[ 1249.464025]  ? do_vfs_ioctl+0xff0/0xff0
[ 1249.467977]  do_syscall_64+0x1d5/0x640
[ 1249.471932]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:27 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="11010000ffffffff00"/22], 0x1c}}, 0x0)

18:27:27 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4e1fc4f3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:27 executing program 1:
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240))
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xff)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xc8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendto$llc(r1, &(0x7f0000000000)=';7', 0x2, 0x0, &(0x7f0000000100)={0x1a, 0x204, 0x0, 0x3, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10)

18:27:27 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="11010000ffffffff00"/22], 0x1c}}, 0x0)

18:27:27 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x706b)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44004)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80029000}, 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000280))
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0xea89dd9cf2faba53)

[ 1249.634880] FAULT_INJECTION: forcing a failure.
[ 1249.634880] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.656688] CPU: 0 PID: 29492 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1249.664581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1249.673929] Call Trace:
[ 1249.676511]  dump_stack+0x1b2/0x281
[ 1249.680136]  should_fail.cold+0x10a/0x149
[ 1249.684284]  should_failslab+0xd6/0x130
[ 1249.688271]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1249.693463]  ? mempool_free+0x1d0/0x1d0
[ 1249.697438]  mempool_create_node+0x76/0x3e0
[ 1249.701769]  ? mempool_kmalloc+0x20/0x20
[ 1249.705831]  bioset_create+0x31b/0x750
[ 1249.709714]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1249.714469]  blk_alloc_queue_node+0xa8/0xb40
[ 1249.718885]  blk_mq_init_queue+0x42/0x90
[ 1249.722943]  loop_add+0x303/0x830
[ 1249.726390]  ? loop_queue_rq+0x280/0x280
[ 1249.730445]  ? loop_queue_work+0x21e0/0x21e0
18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44004)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80029000}, 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000280))
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0xea89dd9cf2faba53)
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44004) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80029000}, 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000280)) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0xea89dd9cf2faba53) (async)

18:27:27 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x706b) (async, rerun: 64)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (rerun: 64)

[ 1249.734853]  loop_control_ioctl+0x11a/0x3f0
[ 1249.739171]  ? loop_lookup+0x190/0x190
[ 1249.743050]  ? SyS_write+0x1b7/0x210
[ 1249.746762]  ? loop_lookup+0x190/0x190
[ 1249.750651]  do_vfs_ioctl+0x75a/0xff0
[ 1249.754501]  ? lock_acquire+0x170/0x3f0
[ 1249.758472]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1249.762879]  ? __fget+0x265/0x3e0
[ 1249.766328]  ? do_vfs_ioctl+0xff0/0xff0
[ 1249.770298]  ? security_file_ioctl+0x83/0xb0
[ 1249.774702]  SyS_ioctl+0x7f/0xb0
[ 1249.778059]  ? do_vfs_ioctl+0xff0/0xff0
18:27:27 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:27 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="11010000ffffffff00"/22], 0x1c}}, 0x0)

18:27:27 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 14)

18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44004)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80029000}, 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000280))
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0xea89dd9cf2faba53)

18:27:27 executing program 1:
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)) (async)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xff) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xc8) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendto$llc(r1, &(0x7f0000000000)=';7', 0x2, 0x0, &(0x7f0000000100)={0x1a, 0x204, 0x0, 0x3, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10)

18:27:27 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x706b)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x706b) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

[ 1249.782029]  do_syscall_64+0x1d5/0x640
[ 1249.785913]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:27 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00009208000100ffffffff"], 0x1c}}, 0x4000000)

18:27:27 executing program 1:
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240))
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xff)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xc8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendto$llc(r1, &(0x7f0000000000)=';7', 0x2, 0x0, &(0x7f0000000100)={0x1a, 0x204, 0x0, 0x3, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xff) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xc8) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
sendto$llc(r1, &(0x7f0000000000)=';7', 0x2, 0x0, &(0x7f0000000100)={0x1a, 0x204, 0x0, 0x3, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10) (async)

[ 1249.867568] FAULT_INJECTION: forcing a failure.
[ 1249.867568] name failslab, interval 1, probability 0, space 0, times 0
[ 1249.888591] CPU: 1 PID: 29542 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1249.896481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1249.905829] Call Trace:
[ 1249.908414]  dump_stack+0x1b2/0x281
[ 1249.912045]  should_fail.cold+0x10a/0x149
18:27:27 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00009208000100ffffffff"], 0x1c}}, 0x4000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00009208000100ffffffff"], 0x1c}}, 0x4000000) (async)

18:27:27 executing program 3:
prctl$PR_GET_TIMERSLACK(0x1e)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = getpid()
sched_getparam(r0, &(0x7f0000000180))
r1 = getpid()
setpriority(0x1, r1, 0x8001)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)="60f83361dd3ce476e314e5d13e097b239bf088041d5c21e124860e92a4c718d840f684e7efd09e192378a38154bc7162f4221edf1bd69fa545a2624d01a1495f3591242d0cfe8059d109772956a3b24281665df284be1a381f4c6f69e52c8f533c3dacccc4d43d44ab8d72dc932b5e181f52758bb434fa389906e6ae6a4eca0b9b12451f50bb01fd69556796bb4eaaf28104d0b8aed9f43b5ef2d79b93b2e7", 0x9f})
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x22, 0x100, 0x10, 0xe, 0x3, 0x54, 0x5, 0x15e})

18:27:27 executing program 3:
prctl$PR_GET_TIMERSLACK(0x1e) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
r0 = getpid()
sched_getparam(r0, &(0x7f0000000180)) (async)
r1 = getpid()
setpriority(0x1, r1, 0x8001)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)="60f83361dd3ce476e314e5d13e097b239bf088041d5c21e124860e92a4c718d840f684e7efd09e192378a38154bc7162f4221edf1bd69fa545a2624d01a1495f3591242d0cfe8059d109772956a3b24281665df284be1a381f4c6f69e52c8f533c3dacccc4d43d44ab8d72dc932b5e181f52758bb434fa389906e6ae6a4eca0b9b12451f50bb01fd69556796bb4eaaf28104d0b8aed9f43b5ef2d79b93b2e7", 0x9f})
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x22, 0x100, 0x10, 0xe, 0x3, 0x54, 0x5, 0x15e})

[ 1249.916207]  should_failslab+0xd6/0x130
[ 1249.920442]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1249.925545]  ? mempool_free+0x1d0/0x1d0
[ 1249.929517]  __kmalloc_node+0x38/0x70
[ 1249.933319]  mempool_create_node+0xb1/0x3e0
[ 1249.937637]  ? mempool_kmalloc+0x20/0x20
[ 1249.941718]  bioset_create+0x31b/0x750
[ 1249.945600]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1249.950356]  blk_alloc_queue_node+0xa8/0xb40
[ 1249.954776]  blk_mq_init_queue+0x42/0x90
[ 1249.959352]  loop_add+0x303/0x830
[ 1249.962803]  ? loop_queue_rq+0x280/0x280
18:27:27 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1249.966862]  ? loop_queue_work+0x21e0/0x21e0
[ 1249.971270]  loop_control_ioctl+0x11a/0x3f0
[ 1249.975588]  ? loop_lookup+0x190/0x190
[ 1249.979470]  ? SyS_write+0x1b7/0x210
[ 1249.983279]  ? loop_lookup+0x190/0x190
[ 1249.987163]  do_vfs_ioctl+0x75a/0xff0
[ 1249.990959]  ? lock_acquire+0x170/0x3f0
[ 1249.994927]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1249.999336]  ? __fget+0x265/0x3e0
[ 1250.002809]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.006953]  ? security_file_ioctl+0x83/0xb0
[ 1250.011359]  SyS_ioctl+0x7f/0xb0
18:27:27 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)=0x9d4851bf82ad2361)

18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)=0x9d4851bf82ad2361)

[ 1250.014815]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.018783]  do_syscall_64+0x1d5/0x640
[ 1250.022675]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:27 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 15)

18:27:27 executing program 3:
prctl$PR_GET_TIMERSLACK(0x1e)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = getpid()
sched_getparam(r0, &(0x7f0000000180))
r1 = getpid()
setpriority(0x1, r1, 0x8001)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)="60f83361dd3ce476e314e5d13e097b239bf088041d5c21e124860e92a4c718d840f684e7efd09e192378a38154bc7162f4221edf1bd69fa545a2624d01a1495f3591242d0cfe8059d109772956a3b24281665df284be1a381f4c6f69e52c8f533c3dacccc4d43d44ab8d72dc932b5e181f52758bb434fa389906e6ae6a4eca0b9b12451f50bb01fd69556796bb4eaaf28104d0b8aed9f43b5ef2d79b93b2e7", 0x9f})
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x22, 0x100, 0x10, 0xe, 0x3, 0x54, 0x5, 0x15e})
prctl$PR_GET_TIMERSLACK(0x1e) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
getpid() (async)
sched_getparam(r0, &(0x7f0000000180)) (async)
getpid() (async)
setpriority(0x1, r1, 0x8001) (async)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)="60f83361dd3ce476e314e5d13e097b239bf088041d5c21e124860e92a4c718d840f684e7efd09e192378a38154bc7162f4221edf1bd69fa545a2624d01a1495f3591242d0cfe8059d109772956a3b24281665df284be1a381f4c6f69e52c8f533c3dacccc4d43d44ab8d72dc932b5e181f52758bb434fa389906e6ae6a4eca0b9b12451f50bb01fd69556796bb4eaaf28104d0b8aed9f43b5ef2d79b93b2e7", 0x9f}) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x22, 0x100, 0x10, 0xe, 0x3, 0x54, 0x5, 0x15e}) (async)

18:27:27 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)=0x9d4851bf82ad2361)

18:27:27 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00009208000100ffffffff"], 0x1c}}, 0x4000000)

18:27:27 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:27 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004094}, 0x4000000)

[ 1250.172891] FAULT_INJECTION: forcing a failure.
[ 1250.172891] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.197319] CPU: 0 PID: 29583 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1250.205218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1250.214573] Call Trace:
[ 1250.217161]  dump_stack+0x1b2/0x281
[ 1250.220790]  should_fail.cold+0x10a/0x149
[ 1250.224943]  should_failslab+0xd6/0x130
[ 1250.228928]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1250.234134]  ? mempool_free+0x1d0/0x1d0
[ 1250.238120]  __kmalloc_node+0x38/0x70
[ 1250.241922]  mempool_create_node+0xb1/0x3e0
[ 1250.246340]  ? mempool_kmalloc+0x20/0x20
[ 1250.250401]  bioset_create+0x31b/0x750
[ 1250.254296]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1250.259486]  blk_alloc_queue_node+0xa8/0xb40
[ 1250.263896]  blk_mq_init_queue+0x42/0x90
[ 1250.267953]  loop_add+0x303/0x830
18:27:27 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
clock_getres(0x5, &(0x7f0000000040))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffff784)
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x1, 0x200, 0x2, 0x4, r1})
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)=0x4)

18:27:27 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:27 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
clock_getres(0x5, &(0x7f0000000040))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffff784)
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x1, 0x200, 0x2, 0x4, r1}) (async, rerun: 64)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)=0x4) (rerun: 64)

[ 1250.271403]  ? loop_queue_rq+0x280/0x280
[ 1250.275456]  ? loop_queue_work+0x21e0/0x21e0
[ 1250.279863]  loop_control_ioctl+0x11a/0x3f0
[ 1250.284182]  ? loop_lookup+0x190/0x190
[ 1250.288088]  ? SyS_write+0x1b7/0x210
[ 1250.291811]  ? loop_lookup+0x190/0x190
[ 1250.295705]  do_vfs_ioctl+0x75a/0xff0
[ 1250.299503]  ? lock_acquire+0x170/0x3f0
[ 1250.303472]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1250.308053]  ? __fget+0x265/0x3e0
[ 1250.311501]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.315455]  ? security_file_ioctl+0x83/0xb0
[ 1250.319846]  SyS_ioctl+0x7f/0xb0
18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
clock_getres(0x5, &(0x7f0000000040))
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffff784) (async)
r1 = getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x1, 0x200, 0x2, 0x4, r1}) (async, rerun: 64)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000100)=0x4) (rerun: 64)

18:27:28 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x14e)

18:27:28 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 16)

[ 1250.323191]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.327147]  do_syscall_64+0x1d5/0x640
[ 1250.331017]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x20040800)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:28 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004094}, 0x4000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004094}, 0x4000000) (async)

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1250.444365] FAULT_INJECTION: forcing a failure.
[ 1250.444365] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.464585] CPU: 0 PID: 29621 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1250.472484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1250.481844] Call Trace:
[ 1250.484431]  dump_stack+0x1b2/0x281
[ 1250.488062]  should_fail.cold+0x10a/0x149
18:27:28 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x14e)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x14e) (async)

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf25020000000800050046ffffff0c00028005000d0000000000440003801400020067656e6576653000000000000000000008000500ac1414aa050008000400000014ec01007767300000000000000000000000010002000000300001800c0007002000000000000000080009006100000008000500010000000600021000000000060004004e240000080006000200000008000400ffffffff08000600ff000000680003800800010000ffffff7f000000000000001400020076657468310000000000000000000000060004006b050000060007004e230000140006002001000000006a0d0000000000000000080003000000000014000200626174616476300000000000000000002c000380060004000100000008000100000000000800030002000000050008000700000005000800400000040000000009000000000000005b97"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x20040800)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

[ 1250.492297]  should_failslab+0xd6/0x130
[ 1250.496267]  kmem_cache_alloc+0x28e/0x3c0
[ 1250.500411]  ? mempool_free+0x1d0/0x1d0
[ 1250.504387]  mempool_create_node+0x2d2/0x3e0
[ 1250.508844]  bioset_create+0x31b/0x750
[ 1250.512822]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1250.517577]  blk_alloc_queue_node+0xa8/0xb40
[ 1250.521981]  blk_mq_init_queue+0x42/0x90
[ 1250.526036]  loop_add+0x303/0x830
[ 1250.529482]  ? loop_queue_rq+0x280/0x280
[ 1250.533538]  ? loop_queue_work+0x21e0/0x21e0
[ 1250.537944]  loop_control_ioctl+0x11a/0x3f0
18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10b600, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x39, 0x3a, 0x14, 0x13, 0x3, 0x10000, 0x0, 0x13d, 0xffffffffffffffff})
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x14, 0x29, 0x15, 0xe, 0x6, 0x5, 0x3, 0x85, 0xffffffffffffffff})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

[ 1250.542257]  ? loop_lookup+0x190/0x190
[ 1250.546134]  ? SyS_write+0x1b7/0x210
[ 1250.549838]  ? loop_lookup+0x190/0x190
[ 1250.554154]  do_vfs_ioctl+0x75a/0xff0
[ 1250.557948]  ? lock_acquire+0x170/0x3f0
[ 1250.561921]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1250.566328]  ? __fget+0x265/0x3e0
[ 1250.569858]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.573828]  ? security_file_ioctl+0x83/0xb0
[ 1250.578238]  SyS_ioctl+0x7f/0xb0
[ 1250.581596]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.585562]  do_syscall_64+0x1d5/0x640
[ 1250.589443]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:28 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004094}, 0x4000000)

18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10b600, 0x0) (async, rerun: 64)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async, rerun: 64)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x39, 0x3a, 0x14, 0x13, 0x3, 0x10000, 0x0, 0x13d, 0xffffffffffffffff}) (async, rerun: 32)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x14, 0x29, 0x15, 0xe, 0x6, 0x5, 0x3, 0x85, 0xffffffffffffffff}) (rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24040010}, 0x8050)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xdf2)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff800000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))

18:27:28 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x14e)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x14e) (async)

18:27:28 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, 0x10, 0x40, 0x7, 0x400}})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], 0xffffffffffffff75}}, 0x40015)

18:27:28 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 17)

18:27:28 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, 0x10, 0x40, 0x7, 0x400}})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], 0xffffffffffffff75}}, 0x40015)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, 0x10, 0x40, 0x7, 0x400}}) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], 0xffffffffffffff75}}, 0x40015) (async)

18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24040010}, 0x8050) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xdf2)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff800000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) (async)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) (async)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))

18:27:28 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1f, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x1c}, @local, 0x10, 0x40, 0x7, 0x400}}) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1], 0xffffffffffffff75}}, 0x40015)

18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10b600, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x39, 0x3a, 0x14, 0x13, 0x3, 0x10000, 0x0, 0x13d, 0xffffffffffffffff})
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x14, 0x29, 0x15, 0xe, 0x6, 0x5, 0x3, 0x85, 0xffffffffffffffff})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x10b600, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x39, 0x3a, 0x14, 0x13, 0x3, 0x10000, 0x0, 0x13d, 0xffffffffffffffff}) (async)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x14, 0x29, 0x15, 0xe, 0x6, 0x5, 0x3, 0x85, 0xffffffffffffffff}) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)

[ 1250.745491] FAULT_INJECTION: forcing a failure.
[ 1250.745491] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.782587] CPU: 0 PID: 29664 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1250.790580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1250.799945] Call Trace:
[ 1250.802530]  dump_stack+0x1b2/0x281
[ 1250.806157]  should_fail.cold+0x10a/0x149
[ 1250.810307]  should_failslab+0xd6/0x130
[ 1250.814292]  kmem_cache_alloc+0x28e/0x3c0
[ 1250.818445]  ? mempool_free+0x1d0/0x1d0
[ 1250.822432]  mempool_create_node+0x2d2/0x3e0
[ 1250.826838]  bioset_create+0x31b/0x750
[ 1250.830712]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1250.835450]  blk_alloc_queue_node+0xa8/0xb40
[ 1250.839840]  blk_mq_init_queue+0x42/0x90
[ 1250.843892]  loop_add+0x303/0x830
[ 1250.847335]  ? loop_queue_rq+0x280/0x280
[ 1250.851558]  ? loop_queue_work+0x21e0/0x21e0
[ 1250.855950]  loop_control_ioctl+0x11a/0x3f0
[ 1250.860253]  ? loop_lookup+0x190/0x190
[ 1250.864121]  ? SyS_write+0x1b7/0x210
[ 1250.867817]  ? loop_lookup+0x190/0x190
[ 1250.871694]  do_vfs_ioctl+0x75a/0xff0
[ 1250.875509]  ? lock_acquire+0x170/0x3f0
[ 1250.879462]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1250.883852]  ? __fget+0x265/0x3e0
[ 1250.887283]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.891234]  ? security_file_ioctl+0x83/0xb0
18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:28 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 18)

[ 1250.895636]  SyS_ioctl+0x7f/0xb0
[ 1250.898982]  ? do_vfs_ioctl+0xff0/0xff0
[ 1250.902951]  do_syscall_64+0x1d5/0x640
[ 1250.906829]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:28 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24040010}, 0x8050)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xdf2) (async)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff800000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) (async)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) (async)
ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))

18:27:28 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
connect$llc(r2, &(0x7f0000000080)={0x1a, 0x2, 0xae, 0xdd, 0x1, 0x1f, @multicast}, 0x10)

18:27:28 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x80000000)

[ 1250.967737] FAULT_INJECTION: forcing a failure.
[ 1250.967737] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.979039] CPU: 1 PID: 29690 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1250.986919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1250.996385] Call Trace:
[ 1250.998971]  dump_stack+0x1b2/0x281
[ 1251.002601]  should_fail.cold+0x10a/0x149
[ 1251.006746]  should_failslab+0xd6/0x130
[ 1251.010715]  kmem_cache_alloc_node_trace+0x25a/0x400
18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1251.015813]  ? mempool_free+0x1d0/0x1d0
[ 1251.019796]  mempool_create_node+0x76/0x3e0
[ 1251.024119]  ? mempool_kmalloc+0x20/0x20
[ 1251.028177]  bioset_create+0x506/0x750
[ 1251.032057]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1251.036809]  blk_alloc_queue_node+0xa8/0xb40
[ 1251.041219]  blk_mq_init_queue+0x42/0x90
[ 1251.045274]  loop_add+0x303/0x830
[ 1251.048724]  ? loop_queue_rq+0x280/0x280
[ 1251.052778]  ? loop_queue_work+0x21e0/0x21e0
[ 1251.057187]  loop_control_ioctl+0x11a/0x3f0
[ 1251.061505]  ? loop_lookup+0x190/0x190
18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:28 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000180))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0)

[ 1251.065384]  ? SyS_write+0x1b7/0x210
[ 1251.069095]  ? loop_lookup+0x190/0x190
[ 1251.072992]  do_vfs_ioctl+0x75a/0xff0
[ 1251.076877]  ? lock_acquire+0x170/0x3f0
[ 1251.080855]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1251.085261]  ? __fget+0x265/0x3e0
[ 1251.088716]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.092690]  ? security_file_ioctl+0x83/0xb0
[ 1251.097093]  SyS_ioctl+0x7f/0xb0
[ 1251.100454]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.104421]  do_syscall_64+0x1d5/0x640
[ 1251.108314]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:28 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 19)

18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:28 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32)
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
connect$llc(r2, &(0x7f0000000080)={0x1a, 0x2, 0xae, 0xdd, 0x1, 0x1f, @multicast}, 0x10)

18:27:28 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000180))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000180)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) (async)

18:27:28 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1251.226477] FAULT_INJECTION: forcing a failure.
[ 1251.226477] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.243843] CPU: 0 PID: 29715 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1251.251830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1251.261200] Call Trace:
[ 1251.263794]  dump_stack+0x1b2/0x281
[ 1251.267423]  should_fail.cold+0x10a/0x149
[ 1251.271571]  should_failslab+0xd6/0x130
18:27:28 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64)
getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
connect$llc(r2, &(0x7f0000000080)={0x1a, 0x2, 0xae, 0xdd, 0x1, 0x1f, @multicast}, 0x10)

18:27:28 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

[ 1251.275553]  kmem_cache_alloc+0x28e/0x3c0
[ 1251.279697]  ? mempool_free+0x1d0/0x1d0
[ 1251.283677]  mempool_create_node+0x2d2/0x3e0
[ 1251.288097]  bioset_create+0x506/0x750
[ 1251.291987]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1251.296742]  blk_alloc_queue_node+0xa8/0xb40
[ 1251.301150]  blk_mq_init_queue+0x42/0x90
[ 1251.305205]  loop_add+0x303/0x830
[ 1251.308652]  ? loop_queue_rq+0x280/0x280
[ 1251.312722]  ? loop_queue_work+0x21e0/0x21e0
[ 1251.317128]  loop_control_ioctl+0x11a/0x3f0
[ 1251.321447]  ? loop_lookup+0x190/0x190
18:27:29 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x80000000)

18:27:29 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:29 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000180))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000180)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80141, 0x0) (async)

[ 1251.325328]  ? SyS_write+0x1b7/0x210
[ 1251.329038]  ? loop_lookup+0x190/0x190
[ 1251.332918]  do_vfs_ioctl+0x75a/0xff0
[ 1251.336712]  ? lock_acquire+0x170/0x3f0
[ 1251.340691]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1251.345099]  ? __fget+0x265/0x3e0
[ 1251.348558]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.352665]  ? security_file_ioctl+0x83/0xb0
[ 1251.357066]  SyS_ioctl+0x7f/0xb0
[ 1251.360418]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.364375]  do_syscall_64+0x1d5/0x640
[ 1251.368260]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:29 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 20)

18:27:29 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:29 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xfa, @local, 0x8}, {0xa, 0x4e22, 0x6, @loopback, 0x3}, 0x0, {[0x2010715f, 0x101, 0x6, 0x47b9, 0x8001, 0x8d34, 0x800, 0x3]}}, 0x5c)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x80, 0x3}, 0x10, 0x828f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2]}, 0x80)

18:27:29 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x540071922d11f406}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb4d}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x1c}}, 0x20000841)

18:27:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4008810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf3c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa387}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240))

[ 1251.493519] FAULT_INJECTION: forcing a failure.
[ 1251.493519] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.545252] CPU: 1 PID: 29740 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1251.553158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1251.562507] Call Trace:
[ 1251.565103]  dump_stack+0x1b2/0x281
[ 1251.568745]  should_fail.cold+0x10a/0x149
[ 1251.572993]  should_failslab+0xd6/0x130
[ 1251.576969]  kmem_cache_alloc+0x28e/0x3c0
[ 1251.581222]  ? mempool_free+0x1d0/0x1d0
[ 1251.585204]  mempool_create_node+0x2d2/0x3e0
[ 1251.589614]  bioset_create+0x506/0x750
[ 1251.593512]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1251.598270]  blk_alloc_queue_node+0xa8/0xb40
[ 1251.602682]  blk_mq_init_queue+0x42/0x90
[ 1251.606743]  loop_add+0x303/0x830
[ 1251.610190]  ? loop_queue_rq+0x280/0x280
[ 1251.614278]  ? loop_queue_work+0x21e0/0x21e0
[ 1251.618682]  loop_control_ioctl+0x11a/0x3f0
[ 1251.622998]  ? loop_lookup+0x190/0x190
[ 1251.626971]  ? SyS_write+0x1b7/0x210
[ 1251.630681]  ? loop_lookup+0x190/0x190
[ 1251.634566]  do_vfs_ioctl+0x75a/0xff0
[ 1251.638363]  ? lock_acquire+0x170/0x3f0
18:27:29 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xfa, @local, 0x8}, {0xa, 0x4e22, 0x6, @loopback, 0x3}, 0x0, {[0x2010715f, 0x101, 0x6, 0x47b9, 0x8001, 0x8d34, 0x800, 0x3]}}, 0x5c)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x80, 0x3}, 0x10, 0x828f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2]}, 0x80)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xfa, @local, 0x8}, {0xa, 0x4e22, 0x6, @loopback, 0x3}, 0x0, {[0x2010715f, 0x101, 0x6, 0x47b9, 0x8001, 0x8d34, 0x800, 0x3]}}, 0x5c) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x80, 0x3}, 0x10, 0x828f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2]}, 0x80) (async)

18:27:29 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x80000000)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x80000000) (async)

18:27:29 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x540071922d11f406}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb4d}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x1c}}, 0x20000841)

18:27:29 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)

18:27:29 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) (async)

18:27:29 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:29 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xfa, @local, 0x8}, {0xa, 0x4e22, 0x6, @loopback, 0x3}, 0x0, {[0x2010715f, 0x101, 0x6, 0x47b9, 0x8001, 0x8d34, 0x800, 0x3]}}, 0x5c) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48) (async)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xf, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x80, 0x3}, 0x10, 0x828f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2]}, 0x80)

18:27:29 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 21)

18:27:29 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (rerun: 32)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xee4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x540071922d11f406}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb4d}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x1c}}, 0x20000841)

[ 1251.642332]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1251.646737]  ? __fget+0x265/0x3e0
[ 1251.650185]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.654152]  ? security_file_ioctl+0x83/0xb0
[ 1251.658553]  SyS_ioctl+0x7f/0xb0
[ 1251.661911]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.665892]  do_syscall_64+0x1d5/0x640
[ 1251.669785]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:29 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20004804)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xbb2afe802c8f9df}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0xf, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x813}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2b14731101554e81)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044050)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4008810) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf3c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa387}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240))

18:27:29 executing program 5:
sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x3ff)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

[ 1251.791881] FAULT_INJECTION: forcing a failure.
[ 1251.791881] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.808345] CPU: 0 PID: 29796 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1251.816235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1251.825584] Call Trace:
[ 1251.828171]  dump_stack+0x1b2/0x281
[ 1251.831804]  should_fail.cold+0x10a/0x149
[ 1251.835956]  should_failslab+0xd6/0x130
18:27:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4008810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf3c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa387}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4008810) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf3c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa387}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80820000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)) (async)

[ 1251.839932]  kmem_cache_alloc+0x28e/0x3c0
[ 1251.844080]  ? mempool_free+0x1d0/0x1d0
[ 1251.848052]  mempool_create_node+0x2d2/0x3e0
[ 1251.852462]  bioset_create+0x506/0x750
[ 1251.856348]  ? kmem_cache_alloc_node+0x38b/0x410
[ 1251.861192]  blk_alloc_queue_node+0xa8/0xb40
[ 1251.865615]  blk_mq_init_queue+0x42/0x90
[ 1251.870016]  loop_add+0x303/0x830
[ 1251.873472]  ? loop_queue_rq+0x280/0x280
[ 1251.877526]  ? loop_queue_work+0x21e0/0x21e0
[ 1251.882020]  loop_control_ioctl+0x11a/0x3f0
[ 1251.886335]  ? loop_lookup+0x190/0x190
18:27:29 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20004804) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xbb2afe802c8f9df}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0xf, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x813}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2b14731101554e81)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044050) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:29 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000080004000000000008000500000000000800060078476804"], 0x2c}}, 0x0)

18:27:29 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)

18:27:29 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 22)

18:27:29 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20004804)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xbb2afe802c8f9df}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0xf, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x813}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2b14731101554e81) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000801) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044050)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1251.890211]  ? SyS_write+0x1b7/0x210
[ 1251.893923]  ? loop_lookup+0x190/0x190
[ 1251.897850]  do_vfs_ioctl+0x75a/0xff0
[ 1251.901648]  ? lock_acquire+0x170/0x3f0
[ 1251.905620]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1251.910121]  ? __fget+0x265/0x3e0
[ 1251.913571]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.917552]  ? security_file_ioctl+0x83/0xb0
[ 1251.921959]  SyS_ioctl+0x7f/0xb0
[ 1251.925323]  ? do_vfs_ioctl+0xff0/0xff0
[ 1251.929294]  do_syscall_64+0x1d5/0x640
[ 1251.933183]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:29 executing program 5:
sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x3ff)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x3ff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:29 executing program 1:
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080))
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000100))
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x5, 0x6})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1252.025246] FAULT_INJECTION: forcing a failure.
[ 1252.025246] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.040593] CPU: 1 PID: 29820 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1252.048500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1252.057851] Call Trace:
[ 1252.060458]  dump_stack+0x1b2/0x281
[ 1252.064110]  should_fail.cold+0x10a/0x149
[ 1252.068263]  should_failslab+0xd6/0x130
[ 1252.072326]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1252.077003]  wb_congested_get_create+0x15b/0x360
[ 1252.081760]  wb_init+0x4f6/0x7c0
[ 1252.085127]  ? __raw_spin_lock_init+0x28/0x100
[ 1252.089719]  cgwb_bdi_init+0xe2/0x1e0
[ 1252.093611]  bdi_alloc_node+0x224/0x2e0
[ 1252.097603]  blk_alloc_queue_node+0xe2/0xb40
[ 1252.102105]  blk_mq_init_queue+0x42/0x90
[ 1252.106163]  loop_add+0x303/0x830
[ 1252.109612]  ? loop_queue_rq+0x280/0x280
[ 1252.113752]  ? loop_queue_work+0x21e0/0x21e0
[ 1252.118170]  loop_control_ioctl+0x11a/0x3f0
18:27:29 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x5)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:29 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x5) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:29 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x5)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x5) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:29 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 23)

[ 1252.122662]  ? loop_lookup+0x190/0x190
[ 1252.126694]  ? SyS_write+0x1b7/0x210
[ 1252.130412]  ? loop_lookup+0x190/0x190
[ 1252.134299]  do_vfs_ioctl+0x75a/0xff0
[ 1252.138099]  ? lock_acquire+0x170/0x3f0
[ 1252.142200]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1252.146614]  ? __fget+0x265/0x3e0
[ 1252.150112]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.154217]  ? security_file_ioctl+0x83/0xb0
[ 1252.158636]  SyS_ioctl+0x7f/0xb0
[ 1252.162003]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.165976]  do_syscall_64+0x1d5/0x640
[ 1252.169869]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:29 executing program 1:
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080))
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000100))
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x5, 0x6})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:29 executing program 3:
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1252.251153] FAULT_INJECTION: forcing a failure.
[ 1252.251153] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.263004] CPU: 1 PID: 29864 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1252.270903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1252.280437] Call Trace:
[ 1252.283009]  dump_stack+0x1b2/0x281
[ 1252.286614]  should_fail.cold+0x10a/0x149
[ 1252.290739]  should_failslab+0xd6/0x130
[ 1252.294803]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1252.299455]  blk_alloc_queue_stats+0x3c/0x100
[ 1252.304034]  blk_alloc_queue_node+0x125/0xb40
[ 1252.308515]  blk_mq_init_queue+0x42/0x90
[ 1252.312557]  loop_add+0x303/0x830
[ 1252.315989]  ? loop_queue_rq+0x280/0x280
[ 1252.320026]  ? loop_queue_work+0x21e0/0x21e0
[ 1252.324500]  loop_control_ioctl+0x11a/0x3f0
[ 1252.328886]  ? loop_lookup+0x190/0x190
[ 1252.332750]  ? SyS_write+0x1b7/0x210
[ 1252.336440]  ? loop_lookup+0x190/0x190
[ 1252.340305]  do_vfs_ioctl+0x75a/0xff0
[ 1252.344081]  ? lock_acquire+0x170/0x3f0
18:27:30 executing program 3:
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:30 executing program 1:
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) (async)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000100)) (async)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x5, 0x6}) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:30 executing program 5:
sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x3ff)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x3ff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180))

18:27:30 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 24)

18:27:30 executing program 0:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1252.348030]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1252.352531]  ? __fget+0x265/0x3e0
[ 1252.355969]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.359922]  ? security_file_ioctl+0x83/0xb0
[ 1252.364395]  SyS_ioctl+0x7f/0xb0
[ 1252.367838]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.371794]  do_syscall_64+0x1d5/0x640
[ 1252.375661]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:30 executing program 5:
prctl$PR_CAPBSET_READ(0x17, 0xd)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:30 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x8001)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180)) (async)

[ 1252.463585] FAULT_INJECTION: forcing a failure.
[ 1252.463585] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.494782] CPU: 1 PID: 29878 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1252.502678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1252.512028] Call Trace:
[ 1252.514792]  dump_stack+0x1b2/0x281
[ 1252.518514]  should_fail.cold+0x10a/0x149
[ 1252.522669]  should_failslab+0xd6/0x130
[ 1252.526648]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1252.531316]  wb_congested_get_create+0x15b/0x360
[ 1252.536075]  wb_init+0x4f6/0x7c0
[ 1252.539437]  ? __raw_spin_lock_init+0x28/0x100
[ 1252.544019]  cgwb_bdi_init+0xe2/0x1e0
[ 1252.547832]  bdi_alloc_node+0x224/0x2e0
[ 1252.551801]  blk_alloc_queue_node+0xe2/0xb40
[ 1252.556207]  blk_mq_init_queue+0x42/0x90
[ 1252.560631]  loop_add+0x303/0x830
18:27:30 executing program 0:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00f586", @ANYRES16=r3, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000c6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000100))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

18:27:30 executing program 5:
prctl$PR_CAPBSET_READ(0x17, 0xd)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0xd) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000180)) (async)

[ 1252.564081]  ? loop_queue_rq+0x280/0x280
[ 1252.568307]  ? loop_queue_work+0x21e0/0x21e0
[ 1252.572725]  loop_control_ioctl+0x11a/0x3f0
[ 1252.577043]  ? loop_lookup+0x190/0x190
[ 1252.581011]  ? SyS_write+0x1b7/0x210
[ 1252.584721]  ? loop_lookup+0x190/0x190
[ 1252.588604]  do_vfs_ioctl+0x75a/0xff0
[ 1252.592413]  ? lock_acquire+0x170/0x3f0
[ 1252.596389]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1252.600799]  ? __fget+0x265/0x3e0
[ 1252.604248]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.608214]  ? security_file_ioctl+0x83/0xb0
18:27:30 executing program 3:
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x0, 0x60, 0x40, 0x56, @mcast1, @empty, 0x700, 0x20, 0x8001, 0x8}})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000002c0)=0x800, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x4, 0x88, 0x7b, 0x20, 0x0, @remote, @mcast1, 0x7, 0x1, 0x1ff, 0x1ff}})

18:27:30 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 25)

18:27:30 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1252.612602]  SyS_ioctl+0x7f/0xb0
[ 1252.615950]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.619906]  do_syscall_64+0x1d5/0x640
[ 1252.623773]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:30 executing program 5:
prctl$PR_CAPBSET_READ(0x17, 0xd)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x0, 0x60, 0x40, 0x56, @mcast1, @empty, 0x700, 0x20, 0x8001, 0x8}})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000002c0)=0x800, 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x4, 0x88, 0x7b, 0x20, 0x0, @remote, @mcast1, 0x7, 0x1, 0x1ff, 0x1ff}})

18:27:30 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x8001)

18:27:30 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r0, 0x111, 0xffffffff, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID]}]}, 0x20}}, 0x4040005)

[ 1252.713678] FAULT_INJECTION: forcing a failure.
[ 1252.713678] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.742255] CPU: 1 PID: 29908 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1252.750161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1252.759607] Call Trace:
18:27:30 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1252.762191]  dump_stack+0x1b2/0x281
[ 1252.765826]  should_fail.cold+0x10a/0x149
[ 1252.767814] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1252.770068]  should_failslab+0xd6/0x130
[ 1252.770082]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1252.770094]  blk_throtl_init+0x7a/0x590
[ 1252.791780]  blkcg_init_queue+0x18f/0x410
[ 1252.795940]  blk_alloc_queue_node+0x826/0xb40
[ 1252.800773]  blk_mq_init_queue+0x42/0x90
[ 1252.804839]  loop_add+0x303/0x830
[ 1252.808307]  ? loop_queue_rq+0x280/0x280
18:27:30 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x0, 0x60, 0x40, 0x56, @mcast1, @empty, 0x700, 0x20, 0x8001, 0x8}})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000002c0)=0x800, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x4, 0x88, 0x7b, 0x20, 0x0, @remote, @mcast1, 0x7, 0x1, 0x1ff, 0x1ff}})

[ 1252.812452]  ? loop_queue_work+0x21e0/0x21e0
[ 1252.816863]  loop_control_ioctl+0x11a/0x3f0
[ 1252.821178]  ? loop_lookup+0x190/0x190
[ 1252.825066]  ? SyS_write+0x1b7/0x210
[ 1252.826902] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1252.828776]  ? loop_lookup+0x190/0x190
[ 1252.828787]  do_vfs_ioctl+0x75a/0xff0
[ 1252.828800]  ? lock_acquire+0x170/0x3f0
[ 1252.849052]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1252.853473]  ? __fget+0x265/0x3e0
[ 1252.857018]  ? do_vfs_ioctl+0xff0/0xff0
18:27:30 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1252.860992]  ? security_file_ioctl+0x83/0xb0
[ 1252.865493]  SyS_ioctl+0x7f/0xb0
[ 1252.868866]  ? do_vfs_ioctl+0xff0/0xff0
[ 1252.872838]  do_syscall_64+0x1d5/0x640
[ 1252.876723]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:30 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x428980, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:30 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 26)

18:27:30 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r0, 0x111, 0xffffffff, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID]}]}, 0x20}}, 0x4040005)

18:27:30 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:30 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x8001)

18:27:30 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r0, 0x111, 0xffffffff, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID]}]}, 0x20}}, 0x4040005)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r0, 0x111, 0xffffffff, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID]}]}, 0x20}}, 0x4040005) (async)

[ 1252.986638] FAULT_INJECTION: forcing a failure.
[ 1252.986638] name failslab, interval 1, probability 0, space 0, times 0
[ 1253.020780] CPU: 0 PID: 29936 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
18:27:30 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x428980, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x428980, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:30 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x46a700, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x400340, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240))

18:27:30 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x428980, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x428980, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

[ 1253.028769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1253.038124] Call Trace:
[ 1253.040707]  dump_stack+0x1b2/0x281
[ 1253.044338]  should_fail.cold+0x10a/0x149
[ 1253.048578]  should_failslab+0xd6/0x130
[ 1253.052557]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1253.057659]  throtl_pd_alloc+0x59/0x990
[ 1253.061632]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 1253.066035]  blkcg_activate_policy+0x115/0x5c0
[ 1253.070614]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 1253.075630]  blk_throtl_init+0x408/0x590
[ 1253.079828]  blkcg_init_queue+0x18f/0x410
[ 1253.083983]  blk_alloc_queue_node+0x826/0xb40
[ 1253.088488]  blk_mq_init_queue+0x42/0x90
[ 1253.092543]  loop_add+0x303/0x830
[ 1253.095988]  ? loop_queue_rq+0x280/0x280
[ 1253.100038]  ? loop_queue_work+0x21e0/0x21e0
[ 1253.104448]  loop_control_ioctl+0x11a/0x3f0
[ 1253.109116]  ? loop_lookup+0x190/0x190
[ 1253.112999]  ? SyS_write+0x1b7/0x210
[ 1253.116708]  ? loop_lookup+0x190/0x190
[ 1253.120592]  do_vfs_ioctl+0x75a/0xff0
[ 1253.121369] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1253.124386]  ? lock_acquire+0x170/0x3f0
18:27:30 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:30 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:30 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x242300, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xffffffff)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x410100, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:30 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 27)

[ 1253.124398]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1253.124411]  ? __fget+0x265/0x3e0
[ 1253.124421]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.124433]  ? security_file_ioctl+0x83/0xb0
[ 1253.153320]  SyS_ioctl+0x7f/0xb0
[ 1253.156687]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.160663]  do_syscall_64+0x1d5/0x640
[ 1253.164640]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x21)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x9ea50a2eefdfab1a)

[ 1253.234247] FAULT_INJECTION: forcing a failure.
[ 1253.234247] name failslab, interval 1, probability 0, space 0, times 0
[ 1253.245712] CPU: 1 PID: 29966 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1253.253591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1253.262941] Call Trace:
[ 1253.265527]  dump_stack+0x1b2/0x281
[ 1253.269158]  should_fail.cold+0x10a/0x149
[ 1253.273307]  should_failslab+0xd6/0x130
[ 1253.277291]  kmem_cache_alloc_node_trace+0x58/0x400
18:27:30 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x46a700, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x400340, 0x0) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000000)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240))

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x21)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x9ea50a2eefdfab1a)

18:27:30 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x21) (async)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x9ea50a2eefdfab1a)

[ 1253.282401]  throtl_pd_alloc+0x59/0x990
[ 1253.286377]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 1253.290781]  blkcg_activate_policy+0x23e/0x5c0
[ 1253.295973]  blk_throtl_init+0x408/0x590
[ 1253.300036]  blkcg_init_queue+0x18f/0x410
[ 1253.304196]  blk_alloc_queue_node+0x826/0xb40
[ 1253.308695]  blk_mq_init_queue+0x42/0x90
[ 1253.312760]  loop_add+0x303/0x830
[ 1253.316210]  ? loop_queue_rq+0x280/0x280
[ 1253.320269]  ? loop_queue_work+0x21e0/0x21e0
[ 1253.324679]  loop_control_ioctl+0x11a/0x3f0
[ 1253.329013]  ? loop_lookup+0x190/0x190
18:27:31 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xec44348a4ecbb52, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x200060c0}, 0x20048000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:31 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x6, 0x4, 0x1ff, 0x10, @empty, @loopback, 0x1, 0x7800, 0x1, 0x2}})
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e)
bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x80, r1, 0x5}, 0xc)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff8a62}, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x200}, 0x1, {[0x5, 0x7, 0x4, 0x7, 0xfffffffb, 0x8000, 0xa, 0xa6b]}}, 0x5c)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e23, 0x1, @private0, 0x1000}, {0xa, 0x4e20, 0x101, @local, 0x9}, 0x1, {[0x5, 0x7, 0x200, 0x2, 0x8, 0xef60, 0x7, 0x2f3e63b7]}}, 0x5c)

18:27:31 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x242300, 0x0) (async, rerun: 32)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000100)) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xffffffff) (async, rerun: 32)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x410100, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1253.332896]  ? SyS_write+0x1b7/0x210
[ 1253.336608]  ? loop_lookup+0x190/0x190
[ 1253.340495]  do_vfs_ioctl+0x75a/0xff0
[ 1253.344303]  ? lock_acquire+0x170/0x3f0
[ 1253.348292]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1253.353486]  ? __fget+0x265/0x3e0
[ 1253.357120]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.361090]  ? security_file_ioctl+0x83/0xb0
[ 1253.365495]  SyS_ioctl+0x7f/0xb0
[ 1253.368850]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.372821]  do_syscall_64+0x1d5/0x640
[ 1253.376706]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:31 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 28)

18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:31 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xec44348a4ecbb52, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x200060c0}, 0x20048000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:31 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x46a700, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x400340, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x46a700, 0x0) (async)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x400340, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000000)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)) (async)

18:27:31 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180))
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x6, 0x4, 0x1ff, 0x10, @empty, @loopback, 0x1, 0x7800, 0x1, 0x2}}) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) (async, rerun: 32)
bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async, rerun: 32)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x80, r1, 0x5}, 0xc) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff8a62}, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x200}, 0x1, {[0x5, 0x7, 0x4, 0x7, 0xfffffffb, 0x8000, 0xa, 0xa6b]}}, 0x5c) (async, rerun: 64)
r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e23, 0x1, @private0, 0x1000}, {0xa, 0x4e20, 0x101, @local, 0x9}, 0x1, {[0x5, 0x7, 0x200, 0x2, 0x8, 0xef60, 0x7, 0x2f3e63b7]}}, 0x5c)

18:27:31 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xec44348a4ecbb52, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x200060c0}, 0x20048000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

[ 1253.534200] FAULT_INJECTION: forcing a failure.
[ 1253.534200] name failslab, interval 1, probability 0, space 0, times 0
[ 1253.568621] CPU: 1 PID: 29994 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
18:27:31 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x705040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0xff)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="bbbba137", @ANYRES16=r5, @ANYBLOB="000c2905000300000008000400000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44800)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r6, &(0x7f0000000080), 0x8)
r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$khugepaged_scan(r7, &(0x7f0000000100), 0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1253.576521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1253.585878] Call Trace:
[ 1253.588469]  dump_stack+0x1b2/0x281
[ 1253.592101]  should_fail.cold+0x10a/0x149
[ 1253.596257]  should_failslab+0xd6/0x130
[ 1253.600242]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1253.605345]  throtl_pd_alloc+0x59/0x990
[ 1253.609325]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 1253.613735]  blkcg_activate_policy+0x115/0x5c0
[ 1253.618318]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 1253.623421]  blk_throtl_init+0x408/0x590
[ 1253.627519]  blkcg_init_queue+0x18f/0x410
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1253.631666]  blk_alloc_queue_node+0x826/0xb40
[ 1253.636161]  blk_mq_init_queue+0x42/0x90
[ 1253.640249]  loop_add+0x303/0x830
[ 1253.643708]  ? loop_queue_rq+0x280/0x280
[ 1253.647759]  ? loop_queue_work+0x21e0/0x21e0
[ 1253.652164]  loop_control_ioctl+0x11a/0x3f0
[ 1253.656474]  ? loop_lookup+0x190/0x190
[ 1253.660365]  ? SyS_write+0x1b7/0x210
[ 1253.664073]  ? loop_lookup+0x190/0x190
[ 1253.667953]  do_vfs_ioctl+0x75a/0xff0
[ 1253.671746]  ? lock_acquire+0x170/0x3f0
[ 1253.675717]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1253.680120]  ? __fget+0x265/0x3e0
18:27:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:31 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x242300, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xffffffff)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x410100, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x242300, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0xffffffff) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x410100, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:31 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 29)

18:27:31 executing program 2:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x6, 0x4, 0x1ff, 0x10, @empty, @loopback, 0x1, 0x7800, 0x1, 0x2}}) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) (async)
bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x80, r1, 0x5}, 0xc) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff8a62}, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x200}, 0x1, {[0x5, 0x7, 0x4, 0x7, 0xfffffffb, 0x8000, 0xa, 0xa6b]}}, 0x5c) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e23, 0x1, @private0, 0x1000}, {0xa, 0x4e20, 0x101, @local, 0x9}, 0x1, {[0x5, 0x7, 0x200, 0x2, 0x8, 0xef60, 0x7, 0x2f3e63b7]}}, 0x5c)

[ 1253.683567]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.687529]  ? security_file_ioctl+0x83/0xb0
[ 1253.691935]  SyS_ioctl+0x7f/0xb0
[ 1253.695295]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.699785]  do_syscall_64+0x1d5/0x640
[ 1253.703674]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:31 executing program 5:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000007dd0d45ef30e94304471274008552f61f6c99f552966f0f0289a6f7a87eab9c300b725519ec80249c9", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf2508000000050005000100000005000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040810)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:31 executing program 5:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000007dd0d45ef30e94304471274008552f61f6c99f552966f0f0289a6f7a87eab9c300b725519ec80249c9", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf2508000000050005000100000005000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:31 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6(0xa, 0x80000, 0x8)
prctl$PR_SET_FPEXC(0xc, 0x1)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, &(0x7f0000000000))
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000140)=0x1, 0x4)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

18:27:31 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x705040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0xff)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="bbbba137", @ANYRES16=r5, @ANYBLOB="000c2905000300000008000400000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44800)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r6, &(0x7f0000000080), 0x8)
r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$khugepaged_scan(r7, &(0x7f0000000100), 0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x705040, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0xff) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="bbbba137", @ANYRES16=r5, @ANYBLOB="000c2905000300000008000400000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44800) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
write$khugepaged_scan(r6, &(0x7f0000000080), 0x8) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async)
write$khugepaged_scan(r7, &(0x7f0000000100), 0x8) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)

[ 1253.791144] FAULT_INJECTION: forcing a failure.
[ 1253.791144] name failslab, interval 1, probability 0, space 0, times 0
[ 1253.825645] CPU: 1 PID: 30037 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
18:27:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1253.833550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1253.842901] Call Trace:
[ 1253.845762]  dump_stack+0x1b2/0x281
[ 1253.849390]  should_fail.cold+0x10a/0x149
[ 1253.853534]  should_failslab+0xd6/0x130
[ 1253.857506]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1253.862620]  throtl_pd_alloc+0x59/0x990
[ 1253.866590]  ? throtl_add_bio_tg+0x1e0/0x1e0
[ 1253.870999]  blkcg_activate_policy+0x115/0x5c0
[ 1253.875583]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 1253.880598]  blk_throtl_init+0x408/0x590
[ 1253.884655]  blkcg_init_queue+0x18f/0x410
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1253.888800]  blk_alloc_queue_node+0x826/0xb40
[ 1253.893291]  blk_mq_init_queue+0x42/0x90
[ 1253.897345]  loop_add+0x303/0x830
[ 1253.900880]  ? loop_queue_rq+0x280/0x280
[ 1253.904930]  ? loop_queue_work+0x21e0/0x21e0
[ 1253.909421]  loop_control_ioctl+0x11a/0x3f0
[ 1253.913734]  ? loop_lookup+0x190/0x190
[ 1253.917620]  ? SyS_write+0x1b7/0x210
[ 1253.921329]  ? loop_lookup+0x190/0x190
[ 1253.925215]  do_vfs_ioctl+0x75a/0xff0
[ 1253.929014]  ? lock_acquire+0x170/0x3f0
[ 1253.932982]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1253.937388]  ? __fget+0x265/0x3e0
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:31 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1253.940834]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.944810]  ? security_file_ioctl+0x83/0xb0
[ 1253.949228]  SyS_ioctl+0x7f/0xb0
[ 1253.952585]  ? do_vfs_ioctl+0xff0/0xff0
[ 1253.956556]  do_syscall_64+0x1d5/0x640
[ 1253.960530]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:31 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6(0xa, 0x80000, 0x8)
prctl$PR_SET_FPEXC(0xc, 0x1) (async)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, &(0x7f0000000000)) (async, rerun: 32)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000140)=0x1, 0x4) (rerun: 32)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

18:27:31 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 30)

18:27:31 executing program 5:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000007dd0d45ef30e94304471274008552f61f6c99f552966f0f0289a6f7a87eab9c300b725519ec80249c9", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf2508000000050005000100000005000d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) (async, rerun: 64)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (rerun: 64)

18:27:31 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x705040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0xff)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="bbbba137", @ANYRES16=r5, @ANYBLOB="000c2905000300000008000400000400"/30], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44800) (async)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r6, &(0x7f0000000080), 0x8) (async)
r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$khugepaged_scan(r7, &(0x7f0000000100), 0x8)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1254.071747] FAULT_INJECTION: forcing a failure.
[ 1254.071747] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.098692] CPU: 1 PID: 30096 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1254.106611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1254.115962] Call Trace:
[ 1254.118548]  dump_stack+0x1b2/0x281
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1254.122221]  should_fail.cold+0x10a/0x149
[ 1254.126380]  should_failslab+0xd6/0x130
[ 1254.130376]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1254.135484]  __kmalloc_node+0x38/0x70
[ 1254.139285]  blk_mq_init_allocated_queue+0x17b/0xfd0
[ 1254.144386]  ? blkcg_init_queue+0x19f/0x410
[ 1254.148710]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1254.153553]  blk_mq_init_queue+0x5a/0x90
[ 1254.157606]  loop_add+0x303/0x830
[ 1254.161142]  ? loop_queue_rq+0x280/0x280
[ 1254.165197]  ? loop_queue_work+0x21e0/0x21e0
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

[ 1254.169605]  loop_control_ioctl+0x11a/0x3f0
[ 1254.173922]  ? loop_lookup+0x190/0x190
[ 1254.177803]  ? SyS_write+0x1b7/0x210
[ 1254.181516]  ? loop_lookup+0x190/0x190
[ 1254.185400]  do_vfs_ioctl+0x75a/0xff0
[ 1254.189287]  ? lock_acquire+0x170/0x3f0
[ 1254.193261]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1254.197721]  ? __fget+0x265/0x3e0
[ 1254.201168]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.205140]  ? security_file_ioctl+0x83/0xb0
[ 1254.209542]  SyS_ioctl+0x7f/0xb0
[ 1254.212901]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.216875]  do_syscall_64+0x1d5/0x640
18:27:31 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c0000000800040000000000"], 0x2c}}, 0x0)

18:27:31 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$inet6(0xa, 0x80000, 0x8)
prctl$PR_SET_FPEXC(0xc, 0x1) (async)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) (async)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, &(0x7f0000000000)) (async)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000140)=0x1, 0x4) (async)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

18:27:31 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:31 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 31)

[ 1254.220761]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:31 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000fddbdf250c00000008000500fdffffff"], 0x1c}}, 0x0)

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x94000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:32 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xde, 0x81, 0x22, @mcast1, @mcast1, 0x80, 0x0, 0x3, 0x101}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1254.310499] FAULT_INJECTION: forcing a failure.
[ 1254.310499] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.358050] CPU: 0 PID: 30124 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1254.365947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1254.375294] Call Trace:
[ 1254.377882]  dump_stack+0x1b2/0x281
[ 1254.381510]  should_fail.cold+0x10a/0x149
[ 1254.385753]  should_failslab+0xd6/0x130
[ 1254.389726]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1254.394827]  __kmalloc_node+0x38/0x70
[ 1254.398623]  blk_mq_realloc_hw_ctxs+0x1a5/0xe00
[ 1254.403288]  ? rcu_read_lock_sched_held+0x16c/0x1d0
18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000fddbdf250c00000008000500fdffffff"], 0x1c}}, 0x0)

18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x1f)

[ 1254.408300]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1254.413576]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1254.418694]  ? blkcg_init_queue+0x19f/0x410
[ 1254.423013]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1254.427679]  blk_mq_init_queue+0x5a/0x90
[ 1254.431731]  loop_add+0x303/0x830
[ 1254.435179]  ? loop_queue_rq+0x280/0x280
[ 1254.439323]  ? loop_queue_work+0x21e0/0x21e0
[ 1254.443725]  loop_control_ioctl+0x11a/0x3f0
[ 1254.448041]  ? loop_lookup+0x190/0x190
[ 1254.451921]  ? SyS_write+0x1b7/0x210
18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x1f)

18:27:32 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xde, 0x81, 0x22, @mcast1, @mcast1, 0x80, 0x0, 0x3, 0x101}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xde, 0x81, 0x22, @mcast1, @mcast1, 0x80, 0x0, 0x3, 0x101}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

[ 1254.455627]  ? loop_lookup+0x190/0x190
[ 1254.459508]  do_vfs_ioctl+0x75a/0xff0
[ 1254.463302]  ? lock_acquire+0x170/0x3f0
[ 1254.467270]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1254.471672]  ? __fget+0x265/0x3e0
[ 1254.475116]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.479085]  ? security_file_ioctl+0x83/0xb0
[ 1254.483485]  SyS_ioctl+0x7f/0xb0
[ 1254.486841]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.490807]  do_syscall_64+0x1d5/0x640
[ 1254.494692]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:32 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 32)

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000fddbdf250c00000008000500fdffffff"], 0x1c}}, 0x0)

18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x1f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x1f) (async)

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x94000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:32 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xde, 0x81, 0x22, @mcast1, @mcast1, 0x80, 0x0, 0x3, 0x101}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xde, 0x81, 0x22, @mcast1, @mcast1, 0x80, 0x0, 0x3, 0x101}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:32 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000100)={0x3754, 0x6})
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0x39e8, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000040))
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0))

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x94000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:32 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000100)={0x3754, 0x6})
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0x39e8, 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000040)) (async)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0))

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x44300, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1254.700258] FAULT_INJECTION: forcing a failure.
[ 1254.700258] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.724152] CPU: 1 PID: 30176 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1254.732058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1254.741405] Call Trace:
[ 1254.743989]  dump_stack+0x1b2/0x281
18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

[ 1254.747616]  should_fail.cold+0x10a/0x149
[ 1254.751762]  should_failslab+0xd6/0x130
[ 1254.755733]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1254.760833]  __kmalloc_node+0x38/0x70
[ 1254.764629]  blk_mq_realloc_hw_ctxs+0x528/0xe00
[ 1254.769302]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1254.774412]  ? blkcg_init_queue+0x19f/0x410
[ 1254.778744]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1254.783410]  blk_mq_init_queue+0x5a/0x90
[ 1254.787466]  loop_add+0x303/0x830
[ 1254.790911]  ? loop_queue_rq+0x280/0x280
[ 1254.794968]  ? loop_queue_work+0x21e0/0x21e0
[ 1254.799386]  loop_control_ioctl+0x11a/0x3f0
[ 1254.803699]  ? loop_lookup+0x190/0x190
[ 1254.807570]  ? SyS_write+0x1b7/0x210
[ 1254.811262]  ? loop_lookup+0x190/0x190
[ 1254.815230]  do_vfs_ioctl+0x75a/0xff0
[ 1254.819210]  ? lock_acquire+0x170/0x3f0
[ 1254.823161]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1254.827550]  ? __fget+0x265/0x3e0
[ 1254.830981]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.835019]  ? security_file_ioctl+0x83/0xb0
[ 1254.839408]  SyS_ioctl+0x7f/0xb0
[ 1254.842751]  ? do_vfs_ioctl+0xff0/0xff0
[ 1254.846704]  do_syscall_64+0x1d5/0x640
18:27:32 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 33)

18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0)

18:27:32 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000100)={0x3754, 0x6}) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0x39e8, 0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000040)) (async)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0))

18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0)

[ 1254.850664]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x44300, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x44300, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

[ 1254.943756] FAULT_INJECTION: forcing a failure.
[ 1254.943756] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.972787] CPU: 0 PID: 30207 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1254.980697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1254.990236] Call Trace:
[ 1254.992832]  dump_stack+0x1b2/0x281
[ 1254.996558]  should_fail.cold+0x10a/0x149
[ 1255.000711]  should_failslab+0xd6/0x130
[ 1255.004694]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1255.009843]  __kmalloc_node+0x38/0x70
[ 1255.013644]  sbitmap_init_node+0x10c/0x3d0
[ 1255.017884]  blk_mq_realloc_hw_ctxs+0x59b/0xe00
[ 1255.022580]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1255.027773]  ? blkcg_init_queue+0x19f/0x410
[ 1255.032099]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1255.036772]  blk_mq_init_queue+0x5a/0x90
[ 1255.040857]  loop_add+0x303/0x830
18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) (async)

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x44300, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:32 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x994)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x31, 0x0, 0xfffffffd}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000180))

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x8, 0x70b92a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="1100ff0f00000100"/22], 0x1c}}, 0x0)

18:27:32 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x994)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x31, 0x0, 0xfffffffd}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000180))
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x994) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x31, 0x0, 0xfffffffd}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000180)) (async)

18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

[ 1255.044307]  ? loop_queue_rq+0x280/0x280
[ 1255.048376]  ? loop_queue_work+0x21e0/0x21e0
[ 1255.052787]  loop_control_ioctl+0x11a/0x3f0
[ 1255.057106]  ? loop_lookup+0x190/0x190
[ 1255.060988]  ? SyS_write+0x1b7/0x210
[ 1255.064699]  ? loop_lookup+0x190/0x190
[ 1255.068581]  do_vfs_ioctl+0x75a/0xff0
[ 1255.072382]  ? lock_acquire+0x170/0x3f0
[ 1255.076362]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1255.080769]  ? __fget+0x265/0x3e0
[ 1255.084314]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.088635]  ? security_file_ioctl+0x83/0xb0
18:27:32 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 34)

18:27:32 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0)

[ 1255.093044]  SyS_ioctl+0x7f/0xb0
[ 1255.096406]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.100376]  do_syscall_64+0x1d5/0x640
[ 1255.104265]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:32 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x994)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x31, 0x0, 0xfffffffd}})
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000180))
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x994) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x31, 0x0, 0xfffffffd}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, &(0x7f0000000180)) (async)

18:27:32 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x8, 0x70b92a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="1100ff0f00000100"/22], 0x1c}}, 0x0)

18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x2)

[ 1255.210843] FAULT_INJECTION: forcing a failure.
[ 1255.210843] name failslab, interval 1, probability 0, space 0, times 0
[ 1255.233615] CPU: 1 PID: 30244 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1255.241512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1255.250863] Call Trace:
[ 1255.253455]  dump_stack+0x1b2/0x281
[ 1255.257094]  should_fail.cold+0x10a/0x149
18:27:32 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x2)

18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

[ 1255.261250]  should_failslab+0xd6/0x130
[ 1255.265230]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1255.270340]  blk_alloc_flush_queue+0x4f/0x2b0
[ 1255.274836]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[ 1255.279511]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1255.284611]  ? blkcg_init_queue+0x19f/0x410
[ 1255.288945]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1255.293610]  blk_mq_init_queue+0x5a/0x90
[ 1255.297668]  loop_add+0x303/0x830
[ 1255.301121]  ? loop_queue_rq+0x280/0x280
[ 1255.305180]  ? loop_queue_work+0x21e0/0x21e0
18:27:32 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

18:27:33 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

[ 1255.309587]  loop_control_ioctl+0x11a/0x3f0
[ 1255.313904]  ? loop_lookup+0x190/0x190
[ 1255.317782]  ? SyS_write+0x1b7/0x210
[ 1255.321493]  ? loop_lookup+0x190/0x190
[ 1255.325372]  do_vfs_ioctl+0x75a/0xff0
[ 1255.329167]  ? lock_acquire+0x170/0x3f0
[ 1255.333169]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1255.337576]  ? __fget+0x265/0x3e0
[ 1255.341024]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.344991]  ? security_file_ioctl+0x83/0xb0
[ 1255.349395]  SyS_ioctl+0x7f/0xb0
[ 1255.352756]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.356722]  do_syscall_64+0x1d5/0x640
18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884d)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40)

18:27:33 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
socket$l2tp6(0xa, 0x2, 0x73)

18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x8, 0x70b92a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="1100ff0f00000100"/22], 0x1c}}, 0x0)

[ 1255.360615]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 35)

18:27:33 executing program 5:
mlockall(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4008011)
mlockall(0x0)
mlockall(0x2)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:33 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
socket$l2tp6(0xa, 0x2, 0x73)
socket$pptp(0x18, 0x1, 0x2) (async)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884d)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) (async)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884d) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40) (async)

18:27:33 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x2)

18:27:33 executing program 5:
mlockall(0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4008011) (async)
mlockall(0x0)
mlockall(0x2) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

[ 1255.481274] FAULT_INJECTION: forcing a failure.
[ 1255.481274] name failslab, interval 1, probability 0, space 0, times 0
[ 1255.494326] CPU: 1 PID: 30279 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1255.502218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1255.511565] Call Trace:
[ 1255.514147]  dump_stack+0x1b2/0x281
[ 1255.517773]  should_fail.cold+0x10a/0x149
[ 1255.521915]  should_failslab+0xd6/0x130
[ 1255.525890]  kmem_cache_alloc_node_trace+0x25a/0x400
18:27:33 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

[ 1255.531031]  __kmalloc_node+0x38/0x70
[ 1255.534834]  blk_alloc_flush_queue+0xf7/0x2b0
[ 1255.539427]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[ 1255.544101]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1255.549201]  ? blkcg_init_queue+0x19f/0x410
[ 1255.553516]  ? blk_alloc_queue_node+0x82f/0xb40
[ 1255.558187]  blk_mq_init_queue+0x5a/0x90
[ 1255.562426]  loop_add+0x303/0x830
[ 1255.565876]  ? loop_queue_rq+0x280/0x280
[ 1255.569929]  ? loop_queue_work+0x21e0/0x21e0
[ 1255.574425]  loop_control_ioctl+0x11a/0x3f0
18:27:33 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884d)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) (async)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00', @ANYRES16=0x0, @ANYRESDEC=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884d) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40) (async)

18:27:33 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0)

18:27:33 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async)
socket$l2tp6(0xa, 0x2, 0x73)

18:27:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 36)

[ 1255.578757]  ? loop_lookup+0x190/0x190
[ 1255.582812]  ? SyS_write+0x1b7/0x210
[ 1255.586526]  ? loop_lookup+0x190/0x190
[ 1255.590409]  do_vfs_ioctl+0x75a/0xff0
[ 1255.594218]  ? lock_acquire+0x170/0x3f0
[ 1255.598231]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1255.602642]  ? __fget+0x265/0x3e0
[ 1255.606101]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.610160]  ? security_file_ioctl+0x83/0xb0
[ 1255.614568]  SyS_ioctl+0x7f/0xb0
[ 1255.617942]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.622003]  do_syscall_64+0x1d5/0x640
[ 1255.625889]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:33 executing program 5:
mlockall(0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4008011) (async, rerun: 64)
mlockall(0x0) (async, rerun: 64)
mlockall(0x2) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:33 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x36, 0xb, 0x5, 0x32, @empty, @remote, 0x8, 0x1, 0x8000, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x4, 0x12, 0x1f, 0x80000001, 0x90, @remote, @remote, 0x20, 0x80, 0x4, 0x1}})

18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="e382ee04eafcdf102b92fa223c539d7f395f404d05b1e1bfbdda9beca3b09223bb7e833c7c1b6d76470dc7c327ecfc197c4f2fd3b00cb631ed4b0c518da798a93a4ca948e83fc2b5d393ab46254b", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x9)

[ 1255.729555] FAULT_INJECTION: forcing a failure.
[ 1255.729555] name failslab, interval 1, probability 0, space 0, times 0
[ 1255.763922] CPU: 1 PID: 30326 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x9)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x9)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x9) (async)

[ 1255.771821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1255.781170] Call Trace:
[ 1255.783768]  dump_stack+0x1b2/0x281
[ 1255.787407]  should_fail.cold+0x10a/0x149
[ 1255.791560]  should_failslab+0xd6/0x130
[ 1255.795534]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1255.800646]  __kmalloc_node+0x38/0x70
[ 1255.804449]  blk_alloc_flush_queue+0xf7/0x2b0
[ 1255.808948]  blk_mq_realloc_hw_ctxs+0x6ab/0xe00
[ 1255.813646]  blk_mq_init_allocated_queue+0x20c/0xfd0
[ 1255.818754]  ? blkcg_init_queue+0x19f/0x410
[ 1255.823074]  ? blk_alloc_queue_node+0x82f/0xb40
18:27:33 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x800)

[ 1255.827760]  blk_mq_init_queue+0x5a/0x90
[ 1255.831819]  loop_add+0x303/0x830
[ 1255.835268]  ? loop_queue_rq+0x280/0x280
[ 1255.839319]  ? loop_queue_work+0x21e0/0x21e0
[ 1255.843726]  loop_control_ioctl+0x11a/0x3f0
[ 1255.848044]  ? loop_lookup+0x190/0x190
[ 1255.851922]  ? SyS_write+0x1b7/0x210
[ 1255.855637]  ? loop_lookup+0x190/0x190
[ 1255.859520]  do_vfs_ioctl+0x75a/0xff0
[ 1255.863316]  ? lock_acquire+0x170/0x3f0
[ 1255.867306]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1255.871713]  ? __fget+0x265/0x3e0
[ 1255.875254]  ? do_vfs_ioctl+0xff0/0xff0
18:27:33 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x620000, 0x0) (async)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x36, 0xb, 0x5, 0x32, @empty, @remote, 0x8, 0x1, 0x8000, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x4, 0x12, 0x1f, 0x80000001, 0x90, @remote, @remote, 0x20, 0x80, 0x4, 0x1}})

[ 1255.879225]  ? security_file_ioctl+0x83/0xb0
[ 1255.883714]  SyS_ioctl+0x7f/0xb0
[ 1255.887078]  ? do_vfs_ioctl+0xff0/0xff0
[ 1255.891052]  do_syscall_64+0x1d5/0x640
[ 1255.894958]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 37)

18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="e382ee04eafcdf102b92fa223c539d7f395f404d05b1e1bfbdda9beca3b09223bb7e833c7c1b6d76470dc7c327ecfc197c4f2fd3b00cb631ed4b0c518da798a93a4ca948e83fc2b5d393ab46254b", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x800)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x36, 0xb, 0x5, 0x32, @empty, @remote, 0x8, 0x1, 0x8000, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x4, 0x12, 0x1f, 0x80000001, 0x90, @remote, @remote, 0x20, 0x80, 0x4, 0x1}})

18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="e382ee04eafcdf102b92fa223c539d7f395f404d05b1e1bfbdda9beca3b09223bb7e833c7c1b6d76470dc7c327ecfc197c4f2fd3b00cb631ed4b0c518da798a93a4ca948e83fc2b5d393ab46254b", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

18:27:33 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x5)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x800)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x800) (async)

[ 1256.029654] FAULT_INJECTION: forcing a failure.
[ 1256.029654] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.048442] CPU: 1 PID: 30367 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1256.056346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1256.065691] Call Trace:
[ 1256.068328]  dump_stack+0x1b2/0x281
[ 1256.071954]  should_fail.cold+0x10a/0x149
[ 1256.076103]  should_failslab+0xd6/0x130
18:27:33 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x7)
write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="dcae925f3616fc241901e7c7344d7bfb414a9cdcd15eb2177e55a31d6d1000cd09136ce58e5ef03277883122025f2ccb3a239d82bef7ce88924df7e3c8e14bd1b1ef70050c49b67328051b89eedfea3cbff3f450e175ee1a4d1692a8a190834c562446531c2ad37c34fde98721", 0x6d)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0))

[ 1256.080081]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1256.085184]  __kmalloc_node+0x38/0x70
[ 1256.088979]  sbitmap_init_node+0x10c/0x3d0
[ 1256.093218]  sbitmap_queue_init_node+0x37/0x5d0
[ 1256.097891]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 1256.102906]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1256.108181]  blk_mq_init_tags+0xf4/0x280
[ 1256.112251]  blk_mq_alloc_rq_map+0x90/0x220
[ 1256.116583]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1256.121251]  blk_mq_init_sched+0x18d/0x4a0
[ 1256.125480]  ? _raw_spin_unlock+0x29/0x40
18:27:33 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}}, 0x0)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24030000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd70000300df2504000000050012007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x6, 0x11, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x1f, 0x5}})

[ 1256.129623]  elevator_init+0x2ee/0x410
[ 1256.133509]  blk_mq_sched_init+0x28/0x40
[ 1256.137572]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1256.142771]  blk_mq_init_queue+0x5a/0x90
[ 1256.146833]  loop_add+0x303/0x830
[ 1256.150294]  ? loop_queue_rq+0x280/0x280
[ 1256.154352]  ? loop_queue_work+0x21e0/0x21e0
[ 1256.158774]  loop_control_ioctl+0x11a/0x3f0
[ 1256.163095]  ? loop_lookup+0x190/0x190
[ 1256.166983]  ? SyS_write+0x1b7/0x210
[ 1256.170701]  ? loop_lookup+0x190/0x190
[ 1256.174591]  do_vfs_ioctl+0x75a/0xff0
18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0xf0, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x500000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x304}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdaf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x120, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbb}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:33 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 38)

18:27:33 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x7)
write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="dcae925f3616fc241901e7c7344d7bfb414a9cdcd15eb2177e55a31d6d1000cd09136ce58e5ef03277883122025f2ccb3a239d82bef7ce88924df7e3c8e14bd1b1ef70050c49b67328051b89eedfea3cbff3f450e175ee1a4d1692a8a190834c562446531c2ad37c34fde98721", 0x6d)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x7) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="dcae925f3616fc241901e7c7344d7bfb414a9cdcd15eb2177e55a31d6d1000cd09136ce58e5ef03277883122025f2ccb3a239d82bef7ce88924df7e3c8e14bd1b1ef70050c49b67328051b89eedfea3cbff3f450e175ee1a4d1692a8a190834c562446531c2ad37c34fde98721", 0x6d) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) (async)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24030000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd70000300df2504000000050012007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x6, 0x11, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x1f, 0x5}})

[ 1256.178401]  ? lock_acquire+0x170/0x3f0
[ 1256.182385]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1256.186800]  ? __fget+0x265/0x3e0
[ 1256.190253]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.194226]  ? security_file_ioctl+0x83/0xb0
[ 1256.198637]  SyS_ioctl+0x7f/0xb0
[ 1256.202001]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.205974]  do_syscall_64+0x1d5/0x640
[ 1256.209861]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:33 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0xf0, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x500000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x304}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdaf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x120, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbb}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:33 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24030000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd70000300df2504000000050012007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x1) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0xff, 0x6, 0x11, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x1f, 0x5}})

18:27:33 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x5)

[ 1256.323616] FAULT_INJECTION: forcing a failure.
[ 1256.323616] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.346852] CPU: 0 PID: 30401 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1256.354751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1256.364105] Call Trace:
[ 1256.366697]  dump_stack+0x1b2/0x281
[ 1256.370326]  should_fail.cold+0x10a/0x149
[ 1256.374481]  should_failslab+0xd6/0x130
[ 1256.378465]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1256.383576]  sbitmap_queue_init_node+0x27f/0x5d0
[ 1256.388342]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1256.393676]  blk_mq_init_tags+0xf4/0x280
[ 1256.397744]  blk_mq_alloc_rq_map+0x90/0x220
[ 1256.402071]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1256.406769]  blk_mq_init_sched+0x18d/0x4a0
[ 1256.411003]  ? _raw_spin_unlock+0x29/0x40
[ 1256.415153]  elevator_init+0x2ee/0x410
[ 1256.419041]  blk_mq_sched_init+0x28/0x40
[ 1256.423097]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1256.428201]  blk_mq_init_queue+0x5a/0x90
[ 1256.432343]  loop_add+0x303/0x830
[ 1256.435790]  ? loop_queue_rq+0x280/0x280
[ 1256.439842]  ? loop_queue_work+0x21e0/0x21e0
[ 1256.444250]  loop_control_ioctl+0x11a/0x3f0
[ 1256.448577]  ? loop_lookup+0x190/0x190
[ 1256.452460]  ? SyS_write+0x1b7/0x210
[ 1256.456172]  ? loop_lookup+0x190/0x190
[ 1256.460055]  do_vfs_ioctl+0x75a/0xff0
[ 1256.463851]  ? lock_acquire+0x170/0x3f0
[ 1256.467818]  ? ioctl_preallocate+0x1a0/0x1a0
18:27:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250800000038000180070006006c6300000600010002000000060002000800000006000200890000000c0007000000000022000000060004004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004010)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:34 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0xf0, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x500000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x304}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdaf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x120, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbb}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0xf0, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x500000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x304}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdaf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x120, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbb}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:34 executing program 1:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x5)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250800000038000180070006006c6300000600010002000000060002000800000006000200890000000c0007000000000022000000060004004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004010)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250800000038000180070006006c6300000600010002000000060002000800000006000200890000000c0007000000000022000000060004004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 39)

18:27:34 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x7) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="dcae925f3616fc241901e7c7344d7bfb414a9cdcd15eb2177e55a31d6d1000cd09136ce58e5ef03277883122025f2ccb3a239d82bef7ce88924df7e3c8e14bd1b1ef70050c49b67328051b89eedfea3cbff3f450e175ee1a4d1692a8a190834c562446531c2ad37c34fde98721", 0x6d) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0))

[ 1256.472223]  ? __fget+0x265/0x3e0
[ 1256.475760]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.479729]  ? security_file_ioctl+0x83/0xb0
[ 1256.484135]  SyS_ioctl+0x7f/0xb0
[ 1256.487503]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.491474]  do_syscall_64+0x1d5/0x640
[ 1256.495371]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250800000038000180070006006c6300000600010002000000060002000800000006000200890000000c0007000000000022000000060004004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004010)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250800000038000180070006006c6300000600010002000000060002000800000006000200890000000c0007000000000022000000060004004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f17d1da}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf77a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4)

18:27:34 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000180))

18:27:34 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xfffffffe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4)

18:27:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f17d1da}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf77a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f17d1da}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf77a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x4) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4) (async)

18:27:34 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xfffffffe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f17d1da}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf77a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f17d1da}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf77a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x4) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000080), 0x4) (async)

[ 1256.636988] FAULT_INJECTION: forcing a failure.
[ 1256.636988] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.694098] CPU: 1 PID: 30454 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1256.701998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1256.711352] Call Trace:
[ 1256.713943]  dump_stack+0x1b2/0x281
[ 1256.717574]  should_fail.cold+0x10a/0x149
[ 1256.721735]  should_failslab+0xd6/0x130
[ 1256.725710]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1256.730822]  blk_mq_init_tags+0x5e/0x280
[ 1256.731275] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000000c"], 0x2c}}, 0x0)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

[ 1256.734880]  blk_mq_alloc_rq_map+0x90/0x220
[ 1256.747791]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1256.752472]  blk_mq_init_sched+0x18d/0x4a0
[ 1256.756808]  ? _raw_spin_unlock+0x29/0x40
[ 1256.760973]  elevator_init+0x2ee/0x410
[ 1256.764867]  blk_mq_sched_init+0x28/0x40
[ 1256.768926]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1256.774191]  blk_mq_init_queue+0x5a/0x90
[ 1256.778257]  loop_add+0x303/0x830
[ 1256.781791]  ? loop_queue_rq+0x280/0x280
[ 1256.785854]  ? loop_queue_work+0x21e0/0x21e0
[ 1256.790273]  loop_control_ioctl+0x11a/0x3f0
[ 1256.794586]  ? loop_lookup+0x190/0x190
[ 1256.798546]  ? SyS_write+0x1b7/0x210
[ 1256.802248]  ? loop_lookup+0x190/0x190
[ 1256.806125]  do_vfs_ioctl+0x75a/0xff0
[ 1256.809904]  ? lock_acquire+0x170/0x3f0
[ 1256.813868]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1256.818254]  ? __fget+0x265/0x3e0
[ 1256.821696]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.825648]  ? security_file_ioctl+0x83/0xb0
[ 1256.830033]  SyS_ioctl+0x7f/0xb0
[ 1256.833376]  ? do_vfs_ioctl+0xff0/0xff0
[ 1256.837336]  do_syscall_64+0x1d5/0x640
18:27:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 40)

18:27:34 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x4)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x486000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

18:27:34 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000180))

[ 1256.841213]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:34 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xfffffffe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4)

18:27:34 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1e040000", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x80000001, @empty, 0xffff}, {0xa, 0x4e20, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1, {[0x7fff, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2]}}, 0x5c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x98, r0, 0x21, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2080000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8810)

[ 1256.947588] FAULT_INJECTION: forcing a failure.
[ 1256.947588] name failslab, interval 1, probability 0, space 0, times 0
[ 1256.959931] CPU: 1 PID: 30505 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1256.967814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1256.977161] Call Trace:
[ 1256.979750]  dump_stack+0x1b2/0x281
[ 1256.983380]  should_fail.cold+0x10a/0x149
[ 1256.987528]  should_failslab+0xd6/0x130
[ 1256.991511]  kmem_cache_alloc_node_trace+0x25a/0x400
18:27:34 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x4)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x486000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x4) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x486000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x1) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)

18:27:34 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0)

[ 1256.996619]  sbitmap_queue_init_node+0x27f/0x5d0
[ 1257.001471]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1257.006849]  blk_mq_init_tags+0xf4/0x280
[ 1257.010909]  blk_mq_alloc_rq_map+0x90/0x220
[ 1257.015226]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1257.019911]  blk_mq_init_sched+0x18d/0x4a0
[ 1257.024141]  ? _raw_spin_unlock+0x29/0x40
[ 1257.028377]  elevator_init+0x2ee/0x410
[ 1257.032260]  blk_mq_sched_init+0x28/0x40
[ 1257.036581]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1257.041695]  blk_mq_init_queue+0x5a/0x90
18:27:34 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x4)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x486000, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x1) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

[ 1257.045757]  loop_add+0x303/0x830
[ 1257.049210]  ? loop_queue_rq+0x280/0x280
[ 1257.053267]  ? loop_queue_work+0x21e0/0x21e0
[ 1257.057682]  loop_control_ioctl+0x11a/0x3f0
[ 1257.062002]  ? loop_lookup+0x190/0x190
[ 1257.065886]  ? SyS_write+0x1b7/0x210
[ 1257.069604]  ? loop_lookup+0x190/0x190
[ 1257.073500]  do_vfs_ioctl+0x75a/0xff0
[ 1257.077298]  ? lock_acquire+0x170/0x3f0
[ 1257.081364]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1257.085775]  ? __fget+0x265/0x3e0
[ 1257.089316]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.093288]  ? security_file_ioctl+0x83/0xb0
18:27:34 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000180))

18:27:34 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 41)

[ 1257.097698]  SyS_ioctl+0x7f/0xb0
[ 1257.101057]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.105027]  do_syscall_64+0x1d5/0x640
[ 1257.108917]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:34 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000003bffffffd3550400ffffffff950000000000000095437a65525194d686f317824abe0c0fc122902781e28f77e14831de6b125dcb3bb8d98815f1a7425ddb9b2aa65211bd5555f75051b76fc978609b0f2b9fbfab4bc531602a9c3b7b"], &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0]}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x28c79819, 0xc3, &(0x7f0000000180)=""/195, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r1, r5]}, 0x80)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:34 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x44000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x80)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x620000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0xbd)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x199140, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0xd2b)

18:27:34 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1e040000", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x80000001, @empty, 0xffff}, {0xa, 0x4e20, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1, {[0x7fff, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2]}}, 0x5c) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x98, r0, 0x21, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2080000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8810)

18:27:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x304, 0x5, 0x1, 0x5, 0x80, @remote}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:34 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x44000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x80) (async)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0) (async)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x620000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0xbd) (async)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x199140, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000140)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0xd2b)

[ 1257.205057] FAULT_INJECTION: forcing a failure.
[ 1257.205057] name failslab, interval 1, probability 0, space 0, times 0
[ 1257.222104] CPU: 0 PID: 30534 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1257.229994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1257.239343] Call Trace:
[ 1257.242032]  dump_stack+0x1b2/0x281
[ 1257.245660]  should_fail.cold+0x10a/0x149
[ 1257.249831]  should_failslab+0xd6/0x130
18:27:34 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x304, 0x5, 0x1, 0x5, 0x80, @remote}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x304, 0x5, 0x1, 0x5, 0x80, @remote}, 0x10) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

18:27:34 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000003bffffffd3550400ffffffff950000000000000095437a65525194d686f317824abe0c0fc122902781e28f77e14831de6b125dcb3bb8d98815f1a7425ddb9b2aa65211bd5555f75051b76fc978609b0f2b9fbfab4bc531602a9c3b7b"], &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0]}, 0x80) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}}) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) (rerun: 64)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48) (async)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x28c79819, 0xc3, &(0x7f0000000180)=""/195, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r1, r5]}, 0x80) (async, rerun: 64)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1257.253813]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1257.258934]  __kmalloc_node+0x38/0x70
[ 1257.262908]  blk_mq_alloc_rq_map+0x113/0x220
[ 1257.267327]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1257.272004]  blk_mq_init_sched+0x18d/0x4a0
[ 1257.276239]  ? _raw_spin_unlock+0x29/0x40
[ 1257.280391]  elevator_init+0x2ee/0x410
[ 1257.284279]  blk_mq_sched_init+0x28/0x40
[ 1257.288339]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1257.293447]  blk_mq_init_queue+0x5a/0x90
[ 1257.297508]  loop_add+0x303/0x830
[ 1257.300977]  ? loop_queue_rq+0x280/0x280
18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x304, 0x5, 0x1, 0x5, 0x80, @remote}, 0x10) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1257.305032]  ? loop_queue_work+0x21e0/0x21e0
[ 1257.309442]  loop_control_ioctl+0x11a/0x3f0
[ 1257.313759]  ? loop_lookup+0x190/0x190
[ 1257.317651]  ? SyS_write+0x1b7/0x210
[ 1257.321363]  ? loop_lookup+0x190/0x190
[ 1257.325246]  do_vfs_ioctl+0x75a/0xff0
[ 1257.329044]  ? lock_acquire+0x170/0x3f0
[ 1257.333013]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1257.337424]  ? __fget+0x265/0x3e0
[ 1257.340892]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.344879]  ? security_file_ioctl+0x83/0xb0
[ 1257.349284]  SyS_ioctl+0x7f/0xb0
18:27:35 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000"], 0x2c}}, 0x0)

18:27:35 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000003bffffffd3550400ffffffff950000000000000095437a65525194d686f317824abe0c0fc122902781e28f77e14831de6b125dcb3bb8d98815f1a7425ddb9b2aa65211bd5555f75051b76fc978609b0f2b9fbfab4bc531602a9c3b7b"], &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0]}, 0x80) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0xff, 0x80, 0x7fff, 0x14, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0x4, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>r3, 0x4, 0x0, 0x81, 0x5, 0x12, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0xfff, 0x3}}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xb3d, 0x5, 0x0, 0x80, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x48) (async)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x40, 0x8}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x9, 0x8001, 0x1, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x2}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff3b}, [@ldst={0x3, 0x2, 0x6, 0x5, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x400, 0x0, &(0x7f0000000640), 0x41100, 0x4, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x7f}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, r5, 0x1, r6, r7]}, 0x80) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0xfff, 0x0, 0x1e113191, 0x400, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80, 0x0, 0x1121, r6, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x9}, 0x48) (async)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x6}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0xb6, 0xb4, &(0x7f0000000a40)=""/180, 0x60600, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0xffff, 0xffffff43}, 0x10, 0x254e, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, 0xffffffffffffffff, r6, r7, r6, r9, r5, r7, r10]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x28c79819, 0xc3, &(0x7f0000000180)=""/195, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x8000, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r1, r5]}, 0x80) (async)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x754, 0x2, 0x0, 0x8})
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1f}, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1, {[0x1, 0x9, 0x10000, 0xff, 0x0, 0xfff, 0x9, 0x4]}}, 0x5c)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x80)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1e040000", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x80000001, @empty, 0xffff}, {0xa, 0x4e20, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1, {[0x7fff, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2]}}, 0x5c) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x98, r0, 0x21, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2080000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8810)

18:27:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 42)

[ 1257.352647]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.356628]  do_syscall_64+0x1d5/0x640
[ 1257.360527]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:35 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x44000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x80) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) (async, rerun: 32)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x20002, 0x0)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x620000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0xbd) (async)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x199140, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0xd2b)

18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x754, 0x2, 0x0, 0x8}) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1f}, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1, {[0x1, 0x9, 0x10000, 0xff, 0x0, 0xfff, 0x9, 0x4]}}, 0x5c) (async)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x80)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x8)

18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x8) (async)

[ 1257.482964] FAULT_INJECTION: forcing a failure.
[ 1257.482964] name failslab, interval 1, probability 0, space 0, times 0
[ 1257.509014] CPU: 0 PID: 30570 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1257.516920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1257.526455] Call Trace:
[ 1257.529047]  dump_stack+0x1b2/0x281
18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x70)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000140))

[ 1257.532939]  should_fail.cold+0x10a/0x149
[ 1257.537109]  should_failslab+0xd6/0x130
[ 1257.541090]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1257.546202]  sbitmap_queue_init_node+0x27f/0x5d0
[ 1257.551049]  ? kmem_cache_alloc_node_trace+0x383/0x400
[ 1257.556416]  blk_mq_init_tags+0x14b/0x280
[ 1257.560569]  blk_mq_alloc_rq_map+0x90/0x220
[ 1257.564983]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1257.569748]  blk_mq_init_sched+0x18d/0x4a0
[ 1257.573985]  ? _raw_spin_unlock+0x29/0x40
[ 1257.578135]  elevator_init+0x2ee/0x410
18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x70) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x1) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000140))

18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x70)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000140))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x70) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x1) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000140)) (async)

[ 1257.582109]  blk_mq_sched_init+0x28/0x40
[ 1257.586176]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1257.591292]  blk_mq_init_queue+0x5a/0x90
[ 1257.595502]  loop_add+0x303/0x830
[ 1257.598954]  ? loop_queue_rq+0x280/0x280
[ 1257.603103]  ? loop_queue_work+0x21e0/0x21e0
[ 1257.607513]  loop_control_ioctl+0x11a/0x3f0
[ 1257.611835]  ? loop_lookup+0x190/0x190
[ 1257.615715]  ? SyS_write+0x1b7/0x210
[ 1257.619451]  ? loop_lookup+0x190/0x190
[ 1257.623338]  do_vfs_ioctl+0x75a/0xff0
[ 1257.627137]  ? lock_acquire+0x170/0x3f0
18:27:35 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000"], 0x2c}}, 0x0)

18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x754, 0x2, 0x0, 0x8}) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x1000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1f}, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1, {[0x1, 0x9, 0x10000, 0xff, 0x0, 0xfff, 0x9, 0x4]}}, 0x5c) (async)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x80) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:35 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x416182, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0xbe220, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000100)=0x1)

18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0500, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x902)

18:27:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 43)

[ 1257.631111]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1257.635520]  ? __fget+0x265/0x3e0
[ 1257.638970]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.643115]  ? security_file_ioctl+0x83/0xb0
[ 1257.647523]  SyS_ioctl+0x7f/0xb0
[ 1257.651060]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.655045]  do_syscall_64+0x1d5/0x640
[ 1257.658936]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x8) (async)

18:27:35 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x416182, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async, rerun: 64)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0xbe220, 0x0) (rerun: 64)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000100)=0x1)

18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000000))

[ 1257.760907] FAULT_INJECTION: forcing a failure.
[ 1257.760907] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1257.787729] CPU: 0 PID: 30618 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1257.795736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1257.805091] Call Trace:
18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0500, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x902)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0500, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x902) (async)

[ 1257.807769]  dump_stack+0x1b2/0x281
[ 1257.811402]  should_fail.cold+0x10a/0x149
[ 1257.815565]  __alloc_pages_nodemask+0x21e/0x2900
[ 1257.820323]  ? __kmalloc_node+0x4c/0x70
[ 1257.824298]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 1257.828877]  ? blk_mq_init_sched+0x18d/0x4a0
[ 1257.833281]  ? elevator_init+0x2ee/0x410
[ 1257.837337]  ? loop_control_ioctl+0x11a/0x3f0
[ 1257.841824]  ? do_vfs_ioctl+0x75a/0xff0
[ 1257.845975]  ? do_syscall_64+0x1d5/0x640
[ 1257.850030]  ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1257.855390]  ? __mutex_unlock_slowpath+0x75/0x770
18:27:35 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000"], 0x2c}}, 0x0)

[ 1257.860324]  ? fs_reclaim_release+0xd0/0x110
[ 1257.864746]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1257.869593]  ? __lockdep_init_map+0x100/0x560
[ 1257.874082]  ? _find_next_bit+0xdb/0x100
[ 1257.878242]  ? __cpu_to_node+0x7b/0xa0
[ 1257.882127]  ? memset+0x20/0x40
[ 1257.885404]  blk_mq_alloc_rqs+0x227/0x6d0
[ 1257.889557]  blk_mq_sched_alloc_tags+0x112/0x240
[ 1257.894316]  blk_mq_init_sched+0x18d/0x4a0
[ 1257.898551]  ? _raw_spin_unlock+0x29/0x40
[ 1257.902697]  elevator_init+0x2ee/0x410
[ 1257.906582]  blk_mq_sched_init+0x28/0x40
18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000000))
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000000)) (async)

[ 1257.910644]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1257.915762]  blk_mq_init_queue+0x5a/0x90
[ 1257.919837]  loop_add+0x303/0x830
[ 1257.923290]  ? loop_queue_rq+0x280/0x280
[ 1257.927442]  ? loop_queue_work+0x21e0/0x21e0
[ 1257.931853]  loop_control_ioctl+0x11a/0x3f0
[ 1257.936252]  ? loop_lookup+0x190/0x190
[ 1257.940127]  ? SyS_write+0x1b7/0x210
[ 1257.943825]  ? loop_lookup+0x190/0x190
[ 1257.947694]  do_vfs_ioctl+0x75a/0xff0
[ 1257.951478]  ? lock_acquire+0x170/0x3f0
[ 1257.955445]  ? ioctl_preallocate+0x1a0/0x1a0
18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xa20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8e7a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000227f1eec7f3130eb419a1079fba39379bd158f4b36fb7c0f7df2408948d92dff265f", @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000"], 0x14}}, 0x0)

18:27:35 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000000))
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000000)) (async)

18:27:35 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c0500, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x902)

[ 1257.960893]  ? __fget+0x265/0x3e0
[ 1257.964328]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.968309]  ? security_file_ioctl+0x83/0xb0
[ 1257.972707]  SyS_ioctl+0x7f/0xb0
[ 1257.976056]  ? do_vfs_ioctl+0xff0/0xff0
[ 1257.980031]  do_syscall_64+0x1d5/0x640
[ 1257.983919]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 44)

18:27:35 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x416182, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3})
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0xbe220, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000100)=0x1)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x416182, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6, 0x3}) (async)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000001c0)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0xbe220, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000100)=0x1) (async)

18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xa20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8e7a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000881) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000227f1eec7f3130eb419a1079fba39379bd158f4b36fb7c0f7df2408948d92dff265f", @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000"], 0x14}}, 0x0)

18:27:35 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)

18:27:35 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)

18:27:35 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0xa20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8e7a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000227f1eec7f3130eb419a1079fba39379bd158f4b36fb7c0f7df2408948d92dff265f", @ANYRES16=r0, @ANYBLOB="110100000000000000000c000000"], 0x14}}, 0x0)

18:27:35 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0000, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x840)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1258.220309] FAULT_INJECTION: forcing a failure.
[ 1258.220309] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1258.241223] CPU: 0 PID: 30682 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1258.249124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1258.258646] Call Trace:
[ 1258.261244]  dump_stack+0x1b2/0x281
[ 1258.264877]  should_fail.cold+0x10a/0x149
[ 1258.269028]  __alloc_pages_nodemask+0x21e/0x2900
[ 1258.273778]  ? __kmalloc_node+0x4c/0x70
[ 1258.277742]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 1258.282394]  ? blk_mq_init_sched+0x18d/0x4a0
[ 1258.286801]  ? mark_held_locks+0xa6/0xf0
[ 1258.290855]  ? retint_kernel+0x2d/0x2d
[ 1258.294725]  ? trace_hardirqs_on_caller+0x3a8/0x580
[ 1258.299724]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1258.304458]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1258.309278]  ? check_preemption_disabled+0x35/0x240
[ 1258.314274]  ? retint_kernel+0x2d/0x2d
[ 1258.318144]  ? _find_next_bit+0xdb/0x100
[ 1258.322628]  ? __cpu_to_node+0x7b/0xa0
[ 1258.326521]  ? blk_mq_hw_queue_to_node+0x9f/0xf0
[ 1258.331263]  blk_mq_alloc_rqs+0x227/0x6d0
[ 1258.335392]  ? blk_mq_alloc_rq_map+0x9d/0x220
[ 1258.340304]  blk_mq_sched_alloc_tags+0x112/0x240
[ 1258.345045]  blk_mq_init_sched+0x18d/0x4a0
[ 1258.349254]  ? _raw_spin_unlock+0x29/0x40
[ 1258.353377]  elevator_init+0x2ee/0x410
[ 1258.357251]  blk_mq_sched_init+0x28/0x40
[ 1258.361306]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1258.366398]  blk_mq_init_queue+0x5a/0x90
[ 1258.370438]  loop_add+0x303/0x830
[ 1258.373934]  ? loop_queue_rq+0x280/0x280
[ 1258.377974]  ? loop_queue_work+0x21e0/0x21e0
[ 1258.382359]  loop_control_ioctl+0x11a/0x3f0
[ 1258.386662]  ? loop_lookup+0x190/0x190
[ 1258.390525]  ? SyS_write+0x1b7/0x210
[ 1258.394222]  ? loop_lookup+0x190/0x190
[ 1258.398082]  do_vfs_ioctl+0x75a/0xff0
[ 1258.401861]  ? lock_acquire+0x170/0x3f0
[ 1258.405811]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1258.410211]  ? __fget+0x265/0x3e0
[ 1258.413643]  ? do_vfs_ioctl+0xff0/0xff0
18:27:36 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000"], 0x2c}}, 0x0)

18:27:36 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)

18:27:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xf3, 0x4)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x3f478bc14ddee45d}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x58c5a6bf8ea1ab9c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfee0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd1ed}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4)

18:27:36 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40441}, 0x8004)

[ 1258.417596]  ? security_file_ioctl+0x83/0xb0
[ 1258.421979]  SyS_ioctl+0x7f/0xb0
[ 1258.425322]  ? do_vfs_ioctl+0xff0/0xff0
[ 1258.429272]  do_syscall_64+0x1d5/0x640
[ 1258.433225]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 45)

18:27:36 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40441}, 0x8004)

18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x3f478bc14ddee45d}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x58c5a6bf8ea1ab9c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfee0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd1ed}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4)

18:27:36 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40441}, 0x8004)
socket$l2tp6(0xa, 0x2, 0x73) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40441}, 0x8004) (async)

18:27:36 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0000, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xf3, 0x4)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) (async)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xf3, 0x4) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101) (async)

[ 1258.598919] FAULT_INJECTION: forcing a failure.
[ 1258.598919] name failslab, interval 1, probability 0, space 0, times 0
[ 1258.635864] CPU: 1 PID: 30721 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1258.643766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1258.653123] Call Trace:
[ 1258.655708]  dump_stack+0x1b2/0x281
[ 1258.659335]  should_fail.cold+0x10a/0x149
[ 1258.663496]  should_failslab+0xd6/0x130
[ 1258.667478]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1258.672582]  __kmalloc_node+0x38/0x70
[ 1258.676476]  blk_mq_alloc_rq_map+0x113/0x220
[ 1258.680905]  blk_mq_sched_alloc_tags+0xaa/0x240
[ 1258.685574]  blk_mq_init_sched+0x18d/0x4a0
[ 1258.689810]  ? _raw_spin_unlock+0x29/0x40
[ 1258.693962]  elevator_init+0x2ee/0x410
18:27:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xf3, 0x4)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:36 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000"], 0x2c}}, 0x0)

18:27:36 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x18001, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5)

[ 1258.697844]  blk_mq_sched_init+0x28/0x40
[ 1258.701909]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1258.707015]  blk_mq_init_queue+0x5a/0x90
[ 1258.711070]  loop_add+0x303/0x830
[ 1258.714863]  ? loop_queue_rq+0x280/0x280
[ 1258.718921]  ? loop_queue_work+0x21e0/0x21e0
[ 1258.723324]  loop_control_ioctl+0x11a/0x3f0
[ 1258.727637]  ? loop_lookup+0x190/0x190
[ 1258.731523]  ? SyS_write+0x1b7/0x210
[ 1258.735242]  ? loop_lookup+0x190/0x190
[ 1258.739124]  do_vfs_ioctl+0x75a/0xff0
[ 1258.742922]  ? lock_acquire+0x170/0x3f0
18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x3f478bc14ddee45d}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (rerun: 32)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x58c5a6bf8ea1ab9c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfee0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd1ed}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4)

18:27:36 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0000, 0x0) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:36 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x40}}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x5f)

[ 1258.746899]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1258.751307]  ? __fget+0x265/0x3e0
[ 1258.754758]  ? do_vfs_ioctl+0xff0/0xff0
[ 1258.758730]  ? security_file_ioctl+0x83/0xb0
[ 1258.763139]  SyS_ioctl+0x7f/0xb0
[ 1258.766499]  ? do_vfs_ioctl+0xff0/0xff0
[ 1258.770468]  do_syscall_64+0x1d5/0x640
[ 1258.774356]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 46)

18:27:36 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x40}}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x5f)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x40}}, 0x20000000) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x5f) (async)

18:27:36 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x18001, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x18001, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5) (async)

18:27:36 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x40}}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x5f)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x40}}, 0x20000000) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)=0x5f) (async)

18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9ffd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x720}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xab9b5c778470f471, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:36 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:36 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1258.910456] FAULT_INJECTION: forcing a failure.
[ 1258.910456] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1258.936075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1258.960853] CPU: 0 PID: 30773 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1258.968747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1258.978093] Call Trace:
[ 1258.980679]  dump_stack+0x1b2/0x281
[ 1258.984317]  should_fail.cold+0x10a/0x149
[ 1258.988475]  __alloc_pages_nodemask+0x21e/0x2900
[ 1258.993242]  ? __kmalloc_node+0x4c/0x70
[ 1258.997234]  ? blk_mq_alloc_rq_map+0x113/0x220
[ 1259.001923]  ? blk_mq_init_sched+0x18d/0x4a0
[ 1259.006440]  ? elevator_init+0x2ee/0x410
[ 1259.010494]  ? loop_control_ioctl+0x11a/0x3f0
[ 1259.015075]  ? do_vfs_ioctl+0x75a/0xff0
[ 1259.019042]  ? do_syscall_64+0x1d5/0x640
[ 1259.023186]  ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1259.028539]  ? __mutex_unlock_slowpath+0x75/0x770
[ 1259.033382]  ? fs_reclaim_release+0xd0/0x110
[ 1259.037787]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 1259.042640]  ? __lockdep_init_map+0x100/0x560
[ 1259.047129]  ? _find_next_bit+0xdb/0x100
[ 1259.051276]  ? __cpu_to_node+0x7b/0xa0
[ 1259.055163]  ? memset+0x20/0x40
18:27:36 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110100000000000000"], 0x2c}}, 0x0)

18:27:36 executing program 3:
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040))
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x18001, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x101)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5)

18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9ffd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x720}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xab9b5c778470f471, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:36 executing program 2:
r0 = getpid()
waitid(0x3, r0, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:36 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
connect$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x304, 0x11, 0x6, 0x7f, 0x5}, 0x10)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100))
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xda}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24008800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x7ff)

[ 1259.058439]  blk_mq_alloc_rqs+0x227/0x6d0
[ 1259.062595]  blk_mq_sched_alloc_tags+0x112/0x240
[ 1259.067366]  blk_mq_init_sched+0x18d/0x4a0
[ 1259.071602]  ? _raw_spin_unlock+0x29/0x40
[ 1259.075749]  elevator_init+0x2ee/0x410
[ 1259.079634]  blk_mq_sched_init+0x28/0x40
[ 1259.083693]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1259.088810]  blk_mq_init_queue+0x5a/0x90
[ 1259.092871]  loop_add+0x303/0x830
[ 1259.096315]  ? loop_queue_rq+0x280/0x280
[ 1259.100354]  ? loop_queue_work+0x21e0/0x21e0
[ 1259.104742]  loop_control_ioctl+0x11a/0x3f0
18:27:36 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 47)

18:27:36 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
connect$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x304, 0x11, 0x6, 0x7f, 0x5}, 0x10)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100))
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xda}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24008800)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x7ff)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
connect$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x304, 0x11, 0x6, 0x7f, 0x5}, 0x10) (async)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100)) (async)
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xda}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24008800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x7ff) (async)

18:27:36 executing program 2:
r0 = getpid()
waitid(0x3, r0, 0x0, 0x8, &(0x7f0000000000)) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:36 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11010000000000000000"], 0x2c}}, 0x0)

[ 1259.109102]  ? loop_lookup+0x190/0x190
[ 1259.112965]  ? SyS_write+0x1b7/0x210
[ 1259.116659]  ? loop_lookup+0x190/0x190
[ 1259.120524]  do_vfs_ioctl+0x75a/0xff0
[ 1259.124319]  ? lock_acquire+0x170/0x3f0
[ 1259.128276]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1259.132751]  ? __fget+0x265/0x3e0
[ 1259.136181]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.140133]  ? security_file_ioctl+0x83/0xb0
[ 1259.144603]  SyS_ioctl+0x7f/0xb0
[ 1259.147944]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.151900]  do_syscall_64+0x1d5/0x640
[ 1259.155779]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:36 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9ffd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x720}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xab9b5c778470f471, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9ffd}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x720}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0xab9b5c778470f471, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0) (async)

18:27:36 executing program 2:
r0 = getpid()
waitid(0x3, r0, 0x0, 0x8, &(0x7f0000000000)) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:36 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

[ 1259.222662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
18:27:36 executing program 2:
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e26, 0x1, @local, 0x8}, {0xa, 0x4e23, 0x1f, @mcast2, 0x9}, 0x1, {[0xa60, 0x4, 0x7f, 0x1, 0x5d7, 0x2, 0x35a4, 0x800]}}, 0x5c)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:36 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)
connect$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x304, 0x11, 0x6, 0x7f, 0x5}, 0x10) (async)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100))
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xda}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24008800) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x7ff)

18:27:37 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
nanosleep(&(0x7f0000000080)={0x77359400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000040)={0x0}}, 0x20)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000ae62bee737aed466cb1b6414464c561490660457a43acbfe", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

[ 1259.284517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1259.302137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1259.338448] FAULT_INJECTION: forcing a failure.
[ 1259.338448] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.364446] CPU: 0 PID: 30847 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1259.372344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1259.381691] Call Trace:
[ 1259.384279]  dump_stack+0x1b2/0x281
18:27:37 executing program 2:
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e26, 0x1, @local, 0x8}, {0xa, 0x4e23, 0x1f, @mcast2, 0x9}, 0x1, {[0xa60, 0x4, 0x7f, 0x1, 0x5d7, 0x2, 0x35a4, 0x800]}}, 0x5c)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:37 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11010000000000000000"], 0x2c}}, 0x0)

[ 1259.387912]  should_fail.cold+0x10a/0x149
[ 1259.392067]  should_failslab+0xd6/0x130
[ 1259.396048]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1259.401147]  dd_init_queue+0x94/0x420
[ 1259.404946]  blk_mq_init_sched+0x214/0x4a0
[ 1259.409177]  ? _raw_spin_unlock+0x29/0x40
[ 1259.413327]  elevator_init+0x2ee/0x410
[ 1259.417212]  blk_mq_sched_init+0x28/0x40
[ 1259.421270]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1259.426383]  blk_mq_init_queue+0x5a/0x90
[ 1259.430444]  loop_add+0x303/0x830
[ 1259.433895]  ? loop_queue_rq+0x280/0x280
[ 1259.437947]  ? loop_queue_work+0x21e0/0x21e0
[ 1259.442378]  loop_control_ioctl+0x11a/0x3f0
[ 1259.446693]  ? loop_lookup+0x190/0x190
[ 1259.450576]  ? SyS_write+0x1b7/0x210
[ 1259.454285]  ? loop_lookup+0x190/0x190
[ 1259.458172]  do_vfs_ioctl+0x75a/0xff0
[ 1259.462149]  ? lock_acquire+0x170/0x3f0
[ 1259.466121]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1259.470526]  ? __fget+0x265/0x3e0
[ 1259.473977]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.477948]  ? security_file_ioctl+0x83/0xb0
[ 1259.482351]  SyS_ioctl+0x7f/0xb0
18:27:37 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 48)

18:27:37 executing program 2:
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e26, 0x1, @local, 0x8}, {0xa, 0x4e23, 0x1f, @mcast2, 0x9}, 0x1, {[0xa60, 0x4, 0x7f, 0x1, 0x5d7, 0x2, 0x35a4, 0x800]}}, 0x5c)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:37 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

18:27:37 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x5fd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))

[ 1259.485717]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.489687]  do_syscall_64+0x1d5/0x640
[ 1259.493573]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:37 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x5fd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x5fd) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100)) (async)

18:27:37 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x80000, 0x921b)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @private2}})
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000))
socket$inet6(0xa, 0x6, 0x67)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000180)=0x38)

18:27:37 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11010000000000000000"], 0x2c}}, 0x0)

18:27:37 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

[ 1259.584679] FAULT_INJECTION: forcing a failure.
[ 1259.584679] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.606082] CPU: 0 PID: 30876 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1259.613989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1259.623428] Call Trace:
[ 1259.626019]  dump_stack+0x1b2/0x281
[ 1259.629750]  should_fail.cold+0x10a/0x149
[ 1259.633904]  should_failslab+0xd6/0x130
[ 1259.637882]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1259.643164]  dd_init_queue+0x94/0x420
[ 1259.647056]  blk_mq_init_sched+0x214/0x4a0
[ 1259.651296]  ? _raw_spin_unlock+0x29/0x40
[ 1259.655446]  elevator_init+0x2ee/0x410
[ 1259.659345]  blk_mq_sched_init+0x28/0x40
[ 1259.663405]  blk_mq_init_allocated_queue+0xca0/0xfd0
[ 1259.668516]  blk_mq_init_queue+0x5a/0x90
[ 1259.672586]  loop_add+0x303/0x830
[ 1259.676039]  ? loop_queue_rq+0x280/0x280
[ 1259.680095]  ? loop_queue_work+0x21e0/0x21e0
18:27:37 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))

[ 1259.684505]  loop_control_ioctl+0x11a/0x3f0
[ 1259.688831]  ? loop_lookup+0x190/0x190
[ 1259.692717]  ? SyS_write+0x1b7/0x210
[ 1259.696429]  ? loop_lookup+0x190/0x190
[ 1259.700310]  do_vfs_ioctl+0x75a/0xff0
[ 1259.704106]  ? lock_acquire+0x170/0x3f0
[ 1259.708074]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1259.712492]  ? __fget+0x265/0x3e0
[ 1259.715944]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.719914]  ? security_file_ioctl+0x83/0xb0
[ 1259.724318]  SyS_ioctl+0x7f/0xb0
[ 1259.727682]  ? do_vfs_ioctl+0xff0/0xff0
[ 1259.731669]  do_syscall_64+0x1d5/0x640
[ 1259.735562]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:38 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
nanosleep(&(0x7f0000000080)={0x77359400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000040)={0x0}}, 0x20) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000ae62bee737aed466cb1b6414464c561490660457a43acbfe", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)

18:27:38 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d8100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:38 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x5fd) (async, rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async, rerun: 32)
socket$pptp(0x18, 0x1, 0x2)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000100))

18:27:38 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c"], 0x2c}}, 0x0)

18:27:38 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6(0xa, 0x80000, 0x921b)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) (async)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) (async)
socket$inet6(0xa, 0x6, 0x67) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000180)=0x38)

18:27:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 49)

[ 1260.425260] FAULT_INJECTION: forcing a failure.
[ 1260.425260] name failslab, interval 1, probability 0, space 0, times 0
[ 1260.439281] CPU: 1 PID: 30905 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1260.447172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1260.456520] Call Trace:
[ 1260.459107]  dump_stack+0x1b2/0x281
[ 1260.462735]  should_fail.cold+0x10a/0x149
[ 1260.466881]  should_failslab+0xd6/0x130
[ 1260.470858]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1260.475959]  __kmalloc_node+0x38/0x70
[ 1260.479761]  disk_expand_part_tbl+0x17a/0x340
[ 1260.484259]  alloc_disk_node+0xf1/0x3d0
[ 1260.488232]  loop_add+0x3cb/0x830
[ 1260.491683]  ? loop_queue_rq+0x280/0x280
[ 1260.496180]  ? loop_queue_work+0x21e0/0x21e0
[ 1260.500597]  loop_control_ioctl+0x11a/0x3f0
[ 1260.504918]  ? loop_lookup+0x190/0x190
[ 1260.508799]  ? SyS_write+0x1b7/0x210
[ 1260.512518]  ? loop_lookup+0x190/0x190
[ 1260.516399]  do_vfs_ioctl+0x75a/0xff0
[ 1260.520197]  ? lock_acquire+0x170/0x3f0
18:27:38 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c"], 0x2c}}, 0x0)

18:27:38 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d8100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:38 executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x80000, 0x921b)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @private2}})
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000))
socket$inet6(0xa, 0x6, 0x67)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000180)=0x38)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$inet6(0xa, 0x80000, 0x921b) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffffff01) (async)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) (async)
socket$inet6(0xa, 0x6, 0x67) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, &(0x7f0000000180)=0x38) (async)

18:27:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 50)

18:27:38 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x5a30c2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4506}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4811}, 0x24004011)

[ 1260.524255]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1260.528744]  ? __fget+0x265/0x3e0
[ 1260.532194]  ? do_vfs_ioctl+0xff0/0xff0
[ 1260.536164]  ? security_file_ioctl+0x83/0xb0
[ 1260.540575]  SyS_ioctl+0x7f/0xb0
[ 1260.543949]  ? do_vfs_ioctl+0xff0/0xff0
[ 1260.547920]  do_syscall_64+0x1d5/0x640
[ 1260.551807]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1260.632436] FAULT_INJECTION: forcing a failure.
[ 1260.632436] name failslab, interval 1, probability 0, space 0, times 0
[ 1260.649070] CPU: 1 PID: 30928 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1260.656967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1260.666311] Call Trace:
[ 1260.668888]  dump_stack+0x1b2/0x281
[ 1260.672501]  should_fail.cold+0x10a/0x149
[ 1260.676631]  should_failslab+0xd6/0x130
[ 1260.680599]  kmem_cache_alloc_node_trace+0x25a/0x400
[ 1260.685782]  __kmalloc_node+0x38/0x70
[ 1260.689582]  disk_expand_part_tbl+0x17a/0x340
[ 1260.694063]  alloc_disk_node+0xf1/0x3d0
[ 1260.698018]  loop_add+0x3cb/0x830
[ 1260.701453]  ? loop_queue_rq+0x280/0x280
[ 1260.705493]  ? loop_queue_work+0x21e0/0x21e0
[ 1260.709880]  loop_control_ioctl+0x11a/0x3f0
[ 1260.714182]  ? loop_lookup+0x190/0x190
[ 1260.718055]  ? SyS_write+0x1b7/0x210
[ 1260.721749]  ? loop_lookup+0x190/0x190
[ 1260.726135]  do_vfs_ioctl+0x75a/0xff0
18:27:38 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x5a30c2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4506}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4811}, 0x24004011)

[ 1260.729916]  ? lock_acquire+0x170/0x3f0
[ 1260.733881]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1260.738267]  ? __fget+0x265/0x3e0
[ 1260.741698]  ? do_vfs_ioctl+0xff0/0xff0
[ 1260.745650]  ? security_file_ioctl+0x83/0xb0
[ 1260.750037]  SyS_ioctl+0x7f/0xb0
[ 1260.753393]  ? do_vfs_ioctl+0xff0/0xff0
[ 1260.757442]  do_syscall_64+0x1d5/0x640
[ 1260.761315]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:38 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
nanosleep(&(0x7f0000000080)={0x77359400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000040)={0x0}}, 0x20)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000ae62bee737aed466cb1b6414464c561490660457a43acbfe", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
nanosleep(&(0x7f0000000080)={0x77359400}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000040)={0x0}}, 0x20) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000ae62bee737aed466cb1b6414464c561490660457a43acbfe", @ANYRES16=r0, @ANYBLOB="110100000000000000000c00000008000500ffffffff"], 0x1c}}, 0x0) (async)

18:27:38 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d8100, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:38 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="110100000000000000000c"], 0x2c}}, 0x0)

18:27:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 51)

18:27:38 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0xe, 0xa, 0x1, 0x9, 0x0, 0x2, 0x30, 0xffffffffffffffff})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

18:27:38 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x5a30c2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4506}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9a}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4811}, 0x24004011)

18:27:38 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x224, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x459}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x1e4e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0xc08d)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

18:27:38 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0xe, 0xa, 0x1, 0x9, 0x0, 0x2, 0x30, 0xffffffffffffffff})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) (async)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0xe, 0xa, 0x1, 0x9, 0x0, 0x2, 0x30, 0xffffffffffffffff}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

[ 1261.296344] FAULT_INJECTION: forcing a failure.
[ 1261.296344] name failslab, interval 1, probability 0, space 0, times 0
[ 1261.308736] CPU: 1 PID: 30950 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1261.316623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1261.325984] Call Trace:
[ 1261.328577]  dump_stack+0x1b2/0x281
[ 1261.332299]  should_fail.cold+0x10a/0x149
[ 1261.336448]  should_failslab+0xd6/0x130
[ 1261.340426]  kmem_cache_alloc_trace+0x29a/0x3d0
18:27:39 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x553a41, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x42002, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x206)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x1f)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000380)=0x80)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000280)=0x6)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2c01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0xffffff01)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f00000002c0))
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)=0xdd14)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000200))
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000340)=0x1)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))

18:27:39 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x224, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x459}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x1e4e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0xc08d)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)

[ 1261.345091]  ? __lock_acquire+0x5fc/0x3f20
[ 1261.349324]  device_create_groups_vargs+0x7b/0x250
[ 1261.354248]  device_create_vargs+0x3a/0x50
[ 1261.358588]  bdi_register_va.part.0+0x35/0x650
[ 1261.363168]  bdi_register+0x101/0x110
[ 1261.366963]  ? bdi_register_va+0x80/0x80
[ 1261.371021]  ? vsnprintf+0x260/0x1340
[ 1261.374802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1261.383381]  bdi_register_owner+0x59/0xf0
[ 1261.387538]  device_add_disk+0x5bb/0xdc0
[ 1261.391599]  ? sprintf+0xa7/0xd0
18:27:39 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0xe, 0xa, 0x1, 0x9, 0x0, 0x2, 0x30, 0xffffffffffffffff})
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))
socket$l2tp6(0xa, 0x2, 0x73) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) (async)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1a, 0xe, 0xa, 0x1, 0x9, 0x0, 0x2, 0x30, 0xffffffffffffffff}) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) (async)

[ 1261.394970]  ? blk_alloc_devt+0x310/0x310
[ 1261.399234]  ? __lockdep_init_map+0x100/0x560
[ 1261.403729]  ? __lockdep_init_map+0x100/0x560
[ 1261.408220]  loop_add+0x615/0x830
[ 1261.411670]  ? loop_queue_rq+0x280/0x280
[ 1261.415732]  ? loop_queue_work+0x21e0/0x21e0
[ 1261.420137]  loop_control_ioctl+0x11a/0x3f0
[ 1261.424451]  ? loop_lookup+0x190/0x190
[ 1261.428329]  ? SyS_write+0x1b7/0x210
[ 1261.432036]  ? loop_lookup+0x190/0x190
[ 1261.435916]  do_vfs_ioctl+0x75a/0xff0
[ 1261.439713]  ? lock_acquire+0x170/0x3f0
18:27:39 executing program 3:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x224, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x459}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x1e4e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0xc08d)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={0x0}}, 0x8881) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) (async)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x224, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x459}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x1e4e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0xc08d) (async)
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x101) (async)

18:27:39 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x12c, r0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x30}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x18085}, 0x5)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r0, 0x111, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}}, 0x0)

18:27:39 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000180))

[ 1261.443690]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1261.448103]  ? __fget+0x265/0x3e0
[ 1261.451560]  ? do_vfs_ioctl+0xff0/0xff0
[ 1261.455534]  ? security_file_ioctl+0x83/0xb0
[ 1261.459944]  SyS_ioctl+0x7f/0xb0
[ 1261.463299]  ? do_vfs_ioctl+0xff0/0xff0
[ 1261.467270]  do_syscall_64+0x1d5/0x640
[ 1261.471158]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
18:27:39 executing program 0:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="110100000000000000000c"], 0x2c}}, 0x0)

[ 1261.492205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1261.508276] kasan: CONFIG_KASAN_INLINE enabled
[ 1261.513118] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 1261.520635] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 1261.526853] Modules linked in:
[ 1261.530041] CPU: 1 PID: 30950 Comm: syz-executor.4 Not tainted 4.14.298-syzkaller #0
[ 1261.538078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 1261.547417] task: ffff888093800140 task.stack: ffff88809aef0000
[ 1261.553478] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120
[ 1261.558913] RSP: 0018:ffff88809aef7b48 EFLAGS: 00010202
[ 1261.564268] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000007c31
[ 1261.571537] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040
[ 1261.578806] RBP: ffffffff87cbd4e0 R08: ffffffff8b9ddc88 R09: 00000000000400ca
[ 1261.586055] R10: ffff8880938009f0 R11: ffff888093800140 R12: ffff8880931c7540
[ 1261.593390] R13: ffffffff87cbd4e0 R14: 0000000000000001 R15: ffff88805c95c31c
[ 1261.600636] FS:  00007fb488fd9700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
[ 1261.608921] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1261.614775] CR2: 00000000200000c0 CR3: 00000000a674e000 CR4: 00000000003406e0
[ 1261.622030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1261.629274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1261.636515] Call Trace:
[ 1261.639082]  sysfs_create_link+0x5f/0xc0
[ 1261.643119]  device_add_disk+0x9f8/0xdc0
[ 1261.647156]  ? sprintf+0xa7/0xd0
[ 1261.650505]  ? blk_alloc_devt+0x310/0x310
[ 1261.654643]  ? __lockdep_init_map+0x100/0x560
[ 1261.659113]  ? __lockdep_init_map+0x100/0x560
[ 1261.663581]  loop_add+0x615/0x830
[ 1261.667015]  ? loop_queue_rq+0x280/0x280
[ 1261.671060]  ? loop_queue_work+0x21e0/0x21e0
[ 1261.675454]  loop_control_ioctl+0x11a/0x3f0
[ 1261.679757]  ? loop_lookup+0x190/0x190
[ 1261.683619]  ? SyS_write+0x1b7/0x210
[ 1261.687308]  ? loop_lookup+0x190/0x190
[ 1261.691168]  do_vfs_ioctl+0x75a/0xff0
[ 1261.694943]  ? lock_acquire+0x170/0x3f0
[ 1261.698897]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1261.703279]  ? __fget+0x265/0x3e0
[ 1261.706706]  ? do_vfs_ioctl+0xff0/0xff0
[ 1261.710740]  ? security_file_ioctl+0x83/0xb0
[ 1261.715122]  SyS_ioctl+0x7f/0xb0
[ 1261.718495]  ? do_vfs_ioctl+0xff0/0xff0
[ 1261.722451]  do_syscall_64+0x1d5/0x640
[ 1261.726327]  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
[ 1261.731496] Code: 84 a1 00 00 00 e8 eb 4e b1 ff 48 c7 c7 c0 d8 04 89 e8 9f af 80 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 b2 
[ 1261.750571] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff88809aef7b48
[ 1261.757524] ---[ end trace d4eaa844620060ed ]---
[ 1261.762269] Kernel panic - not syncing: Fatal exception
[ 1261.767772] Kernel Offset: disabled
[ 1261.771468] Rebooting in 86400 seconds..