40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004005802000008000600", @ANYRES32=r3, @ANYRES16, @ANYRESOCT, @ANYBLOB="6801028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="40010100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600632012afb6f0329ddc25cbe3bfb734c34b9b71ec1ef44a81b2b8028cf577fc402c9122ec0032c9af787bc0b4b4e00c70959f2d911991c3b11d5573f2fb288cc4b8f3aa1668b74db249ce407993a31b4372776b65dbe474cacb18e98c1f", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400d900000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="c80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYRES32=r0], 0x410}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r7, &(0x7f0000000280)='./file0\x00', 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f00000001c0)={0xc5}) 23:31:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:31:28 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa}]}, 0x18}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:28 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:28 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1234.614244] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:31:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1234.703330] FAT-fs (loop7): Unrecognized mount option "vcan0" or missing value 23:31:28 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:28 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:29 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:31:29 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1235.087919] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:31:44 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 7: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa}]}, 0x18}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa}]}, 0x18}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000, 0x0, 0x0, 0xd47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:31:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x5, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:31:44 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc00) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1250.512473] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:31:44 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x6, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:31:44 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa}]}, 0x18}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1250.674630] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:31:44 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:31:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x8, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:31:44 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x191f3fa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @remote, 0x80000000}, 0x1c) 23:31:44 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1250.835180] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1250.843137] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:31:45 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x940, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x43, 0xc21}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x804) 23:32:01 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:01 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 7: statx(0xffffffffffffffff, 0x0, 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r0, @ANYBLOB="6c6f6f73632c76657273696f6e3d3970323030302e752c64666c74676919953b3bcec67d55893dbe75697b0000000000000000dec3229fea237d6f5f11ed1f1a6e9ce548fb4e7f95bfe8883b672a306e9da8d3259e0b771d4d48add86945100f8a165cfee5ada877087932a209a7dd0ceba15d5bd4b4ffbec1f4e4304e919fa9b50daa30e80d00"/144, @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=r1, @ANYRESOCT=r2]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000000080), 0x4) recvfrom(r4, &(0x7f0000001e00)=""/4096, 0x1000, 0x40, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 23:32:01 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000b5d000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0xb, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:01 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1266.937275] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:32:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x10, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:01 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:01 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1267.299632] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1281.757477] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1281.759595] audit: type=1400 audit(1704151935.933:21): avc: denied { associate } for pid=12041 comm="syz-executor.6" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1281.764993] audit: type=1400 audit(1704151935.938:22): avc: denied { relabelfrom } for pid=12041 comm="syz-executor.6" name="" dev="pipefs" ino=28390 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1281.768307] audit: type=1400 audit(1704151935.942:23): avc: denied { relabelto } for pid=12041 comm="syz-executor.6" name="" dev="pipefs" ino=28390 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:mouse_device_t:s0 tclass=fifo_file permissive=1 23:32:15 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:15 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:15 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:15 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000027e000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffff28d, 0x6}, 0x13800, 0x0, 0x0, 0x0, 0xc1, 0xffffffe0}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0xc0045878, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1e5) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x20d74cfccddbedfb, 0x4d}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f00000001c0)=0x3) fsetxattr$security_selinux(r5, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:15 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x12, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:15 executing program 7: statx(0xffffffffffffffff, 0x0, 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r0, @ANYBLOB="6c6f6f73632c76657273696f6e3d3970323030302e752c64666c74676919953b3bcec67d55893dbe75697b0000000000000000dec3229fea237d6f5f11ed1f1a6e9ce548fb4e7f95bfe8883b672a306e9da8d3259e0b771d4d48add86945100f8a165cfee5ada877087932a209a7dd0ceba15d5bd4b4ffbec1f4e4304e919fa9b50daa30e80d00"/144, @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=r1, @ANYRESOCT=r2]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000000080), 0x4) recvfrom(r4, &(0x7f0000001e00)=""/4096, 0x1000, 0x40, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 23:32:15 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1281.830298] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:32:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x13, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:16 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x31, 0x6, 0x0, 0x40, 0x0, 0x38000000000, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x80, 0x6, 0x80000000, 0x5, 0x9, 0x7f, 0x3, 0x0, 0x25, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) dup2(r2, r0) 23:32:16 executing program 7: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000027e000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffff28d, 0x6}, 0x13800, 0x0, 0x0, 0x0, 0xc1, 0xffffffe0}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0xc0045878, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1e5) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x20d74cfccddbedfb, 0x4d}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f00000001c0)=0x3) fsetxattr$security_selinux(r5, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:16 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:16 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:16 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1282.075913] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:32:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x14, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1282.122488] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:32:16 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/notes', 0x0, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) openat(r6, &(0x7f0000000140)='./file0\x00', 0xc040, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 23:32:16 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:16 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:16 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc0000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x15, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:16 executing program 6: r0 = syz_io_uring_setup(0x2427, &(0x7f0000000080)={0x0, 0x20000, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f000058b000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000393000/0x3000)=nil, 0x3000, 0x2, 0x1f012, r1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="c71684124a7fdc", 0x7}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x42) fork() io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 23:32:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1282.406004] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:32:31 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x400, 0x5, 0x100000000, 0x4, 0x80000000, 0x8}, {0x3, 0x80, 0x900000000, 0xfffffffffffffc92, 0x3f, 0xfff}], ['\x00']}) fork() 23:32:31 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2ea4, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000500), 0x9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0xc0045878, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8800, 0x0) lseek(r6, 0x1, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x4, 0x3, &(0x7f0000000100)="3c5f306250a8ed2692b825e97a01007126c23da884bd48603696827c6aa55381f524", 0xbc, 0x0, 0x1, {0x0, r5}}, 0x800) 23:32:31 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:31 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:31 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x16, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:31 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:31 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc00000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1297.179605] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1297.199704] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:32:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x18, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:31 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x19, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:31 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1297.463254] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:32:46 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:46 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2000000000000000}, 0x11010, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x7) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) mbind(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x1f3, 0x4, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x4000004, 0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0xc2f30000000, 0x80) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/94) shmat(0x0, &(0x7f0000ff8000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) dup2(0xffffffffffffffff, r2) 23:32:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:32:46 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:46 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x1000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:46 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:32:46 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffc929, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x38, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="d102d3ebd90a538f04ea3e9e084fb8c1bd1007e28cfd74af3c0582834696353ddb00d510a6f61d751ed4e82aab6e2af70670825c63e84aa601aa2d543de6967fd12dab6bbd32e1ba2dab01b684bd04214adb95541299fe198d31d02288eaa5f7e0b140a5ff655b3ad3c90d771e53a652decfe516146390ac050acf2d0c9970b55538a9843dfb92b420e20255034bf82e28b1b240", 0x94}, {&(0x7f0000000340)="f3028dc0abec626c2e95965cc7241851c17618e26009dbda18ce0dc302b23d1c4b3be8ca921ae5fd5af5228175a1031255fc9147395cf8e8c7804f1ea97bab648a59b9539bfb83ba437b0fe558ba86fccc6668f4970d10771b1883b728fac6c1b211c1c332353686d0aba4e970f15614e509ccf2734a7604ee7578b409ae81eb5b90fdc7798edefa5b3c545e4d", 0x8d}, {&(0x7f0000000180)="b1f23e4c45e932b26350a3e2aa239405c5464b605163b25473707959c10f62dacf3b6832ad2d9fc8a5bb9cda4cade57e2f2f0f4355a5c7eadba84b2087ad489a27b20d", 0x43}, {&(0x7f0000000400)="d25f3e2e7bd355c3bd40188612186e4d2963b9dfec8a74c31b09163892a0958faf6dfd8cd4be7578ae777c65d8ae89045a921bcff67a25d2b7b13c54698fb82af34d476c74bf55af2eb8c73ba24ec04c3181ab4d1bbefff65500f80de6ce61df33d441dbf716ca2dd096233e6f40370c9fc9ef8f96d331f4fa8758da5861d4e9634c7539e0a875d957", 0x89}, {&(0x7f00000004c0)="5b90fa962bea6cf8a462971fe2e51db417e5fe6d243daf1587ea9333f9cce23ee355536fe90240ea4b780be46ec759fe8756c328bb4dadc506ee6d09e268d0a93bee0e1253651b4e87ee4e13e214c4de1ddc21b1b6cc03ccca8f28752d0bf1f2f5178f53f03499a88e88b457007583196eae4ba45e89a7ebaf2ead8421f7d72c3490d36cbf0f3b3f038c794ce0335eed6f3cc4dc78206a296149ed5c0dc20ac066e6dd7b252f3e2b37407ba85a69a52867", 0xb1}], 0x5, 0x0, 0x7f, 0x2) pread64(r1, &(0x7f0000000580)=""/4096, 0x1000, 0x85) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:32:46 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1311.962551] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1311.966043] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:32:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1b, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:09 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc00000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:09 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x2000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:09 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1c, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2f9}, &(0x7f00000a0000)=nil, &(0x7f000030e000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0xfffffea8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x80000001}, 0x2094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0xc0045878, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) syz_io_uring_submit(r0, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x33, 0x181140, 0x0, {0x0, r7}}, 0xf6) ftruncate(r3, 0x1000003) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x91, 0xb7, 0x4, 0x6, 0x7, 0x0, 0xd83, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x12083, 0x7, 0x2, 0x1, 0x2, 0xfffffffa, 0x6, 0x0, 0xfffffff8, 0x0, 0x5}, r4, 0x1, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xf8, 0x4, 0xff, 0x0, 0x0, 0x7fca, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x100000001, 0x5}, 0x413, 0x1, 0x0, 0x1, 0x800, 0xf82a, 0x971d, 0x0, 0x4}, 0x0, 0x8, r1, 0xb) fork() [ 1335.206034] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1335.222415] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1d, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1e, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1335.421697] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:09 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1335.468073] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:33:09 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x6000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x21, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1335.614914] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:09 executing program 7: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x22, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:09 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:09 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0xb1, 0x2, 0xf8, 0x0, 0xffffffffffff55c1, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0xfffffffffffff5e7}, 0x1020, 0x8a, 0x9, 0x3, 0x3, 0x80000001, 0x9, 0x0, 0xffffff7f}, 0x0, 0x10, r0, 0x2) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x5bc) io_uring_enter(r3, 0x39f8, 0x18e8, 0x3, &(0x7f0000000180)={[0xffffffff00000000]}, 0x8) fork() 23:33:09 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1335.747092] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1335.751339] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:33:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x23, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:10 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:10 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:10 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1336.143405] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:26 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:26 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x20000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:26 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:26 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x91800, 0x3e, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002301000000000123252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c110100000000000000000113000000002200170100000000011700080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000010e00)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000010f00)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011000)="010002001a0000004db9f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303044454100000000000000", 0x60, 0x10000}, {&(0x7f0000011100)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011300)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011400)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011500)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011600)="05000200ab000000e5acf001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000010000000101000021000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011800)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011900)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011a00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011b00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000011c00)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000011d00)="01000200fb000000993ef001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303045313400000000000000", 0x60, 0x18000}, {&(0x7f0000011e00)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000011f00)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012000)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012100)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012200)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012300)="05000200bb000000e5acf001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012400)="000000000000000000000000000000000000000000000000010000000101000021000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012500)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012600)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012700)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012800)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012900)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012a00)="090002008800000018af7600400000007810e40709140b2a3a0000000100000000000000000000000d01000000000000000000000000000000000000000000000000000000000000010000002e0000000000000021000000002a67656e69736f696d61676500000000000000000000000000000000000000060000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012b00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000012c00)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000012d00)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000012e00)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000012f00)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013000)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013100)="050102008e0000007c60a8000200000000000000040000000100000400000000000030020000000000000000a51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013200)="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"/288, 0x120, 0x82000}, {&(0x7f0000013400)="0501020065000000a50ca8000400000000000000040000000100000400000000000030020000000000000000a51400000100000000000000800000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000800000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013500)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c6530010102006e00000076d31c000500000001000006000800000b000000000000000c01000000000866696c6531", 0x80, 0x83000}, {&(0x7f0000013600)="050102009d00000045a2a8000600000000000000040000000100000500000000000030020000000000000000841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001900"/192, 0xc0, 0x83800}, {&(0x7f0000013700)="0501020028000000442da80007000000000000000400000001000005000000000000300200000000000000008410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001a00"/192, 0xc0, 0x84000}, {&(0x7f0000013800)="05010200010000002524a8000800000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001b00"/192, 0xc0, 0x84800}, {&(0x7f0000013900)="0501020056000000207da8000900000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001b00"/192, 0xc0, 0x85000}, {&(0x7f0000013a00)="050102008100000018afa8000a000000000000000400000001000005000000000000300200000000000000008410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002000"/192, 0xc0, 0x85800}, {&(0x7f0000013b00)="0501020039000000f690a0000b00000000000000040000000100000500000000000030020000000000000000841000000100000000000000000000000000000000000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000c0100"/192, 0xc0, 0x86000}, {&(0x7f0000013c00)="01001501000001000000050016010000010046494c4530000000000000000000", 0x20, 0x86800}, {&(0x7f0000013d00)="01000000011500010000050000000116000146494c4530000000000000000000", 0x20, 0x87800}, {&(0x7f0000013e00)="010017010000010000000a0018010000010000660069006c0065003000000000", 0x20, 0x88800}, {&(0x7f0000013f00)="010000000117000100000a0000000118000100660069006c0065003000000000", 0x20, 0x89800}, {&(0x7f0000014000)="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", 0x380, 0x8a800}, {&(0x7f0000014400)="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", 0x200, 0x8b000}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a0802000001000001010134001a0100000000011a64000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00180100000000011800080000000008007809140b2a3a08020000010000010a00660069006c00650030002c001b0100000000011b0a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b800}, {&(0x7f0000014800)="2200180100000000011800080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a080200000100000101012c0021010000000001211a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00220100000000012200000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0x8c000}, {&(0x7f0000014900)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x8c800}, {&(0x7f0000014a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8d000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x8d800}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x90800}, {&(0x7f0000015100)="02000200f000000001d7f0012201000000800000200000000080000030000000", 0x20, 0x91000}], 0x0, &(0x7f0000015200)) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="2d5bf72a5e4af2a2989ced2b681c0332966d311d53c05de974b5f070e6d211bd892e4af94c654b1d3a80b8116d6c422e3a1e97edd4b5447b4e933f5ab900d47aa3006c2072de457930d2f9a88fe8e0de69eb67c57817ae7f6b0341509d98aab9240d089112c51a93eb", 0x69, 0xffffffffffffff45}, {&(0x7f0000000800)="3625d8f0179d7e36559a53781d0ed7f9600fb58a6caff5b6f3497d252b90c488d445470b7a794679afa0e7674d82e5bd1eeb39ad3a64fa400b5a3a334e78c371903f5f53d53b619907afa2a1016bc2db50175751456741cb52f55043f42d6a572f5d611453eed291e03613aa2a2f6ca6b0d7e7904af1a63e219c7bce631e0072b12c2ab93c7009901e06d2f09ce9582b6ddf", 0x92, 0x1ff}], 0x1240000, &(0x7f00000001c0)={[{@fat=@quiet}], [{@euid_gt={'euid>', 0xee00}}, {@hash}]}) statx(r0, &(0x7f0000000900)='./file0/../file0\x00', 0x400, 0x4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffffff, r2, 0x400) r3 = fsmount(0xffffffffffffffff, 0x1, 0xd) clone3(&(0x7f0000000cc0)={0x201108100, &(0x7f0000000a40)=0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0), {0x11}, &(0x7f0000000b00)=""/72, 0x48, &(0x7f0000000b80)=""/207, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 23:33:26 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2a, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:26 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x8000) kcmp(r0, 0xffffffffffffffff, 0x1, r1, r2) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:26 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1352.255795] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1352.280470] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2b, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:26 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:26 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0xc1008, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x7, 0x1000}, 0x1800, 0x0, 0xffff, 0x4, 0x8000, 0xffffffff, 0x5, 0x0, 0xfffffffc, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaa86c, &(0x7f0000000080)=[{&(0x7f0000000300)="ea669667cb690e77ad650eae32603434c960e6d4ebea7a3c7a09af306a2166df540d04c142dc9d1171798d9ea1bb10a47333d77aba060040e4ef7501fe93303c675562eec8b9f06744cd3c6166e0d6110539c7c07d353946ffc1c1244cdc8b165f3b90a1e0bc39ff7bd4b1ff90dc6130f648073a7b41ea80d8c8b9a853aae45944ab7658906e25ddaac7c247cfbb021f188da0978db9d5520882d4f26cf009c9db52615e22611b1f16632ca590b9d208ff436e8927217b8ae02d9a1d8482a5e785b8cb9140a73c", 0x0, 0x2}, {&(0x7f0000000180)="76e3a4ce8858ed9db0b78fd221352d8a860882aed0859d1ed3f63c744b59d3f3295b4a38ac899be24155f180f83089819c76992e5da03126b85268fd4c275cdebe4affa0e4cfab233c1c009df8799abf6b86530a64b04d77ad6e2fab12dd8ae80856698192ad8faf1eea0ef237d651281e547faa8f205fdd93b3c16e366d8dc9864eba08de165da0536e620517655f0b5795af0d07de354f2c780ecaca498950b93ca20f60d78eefbe842b89", 0x0, 0x3}], 0x8000, &(0x7f00000002c0)=ANY=[]) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) pread64(r2, &(0x7f0000000400)=""/151, 0x97, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000280)) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x210000, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYRES64]) close(r3) 23:33:26 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x40000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:40 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:40 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:40 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x5ef20fff) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5ea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r7 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffff, 0x200000) getdents64(r7, &(0x7f0000000500)=""/192, 0xc0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup2(0xffffffffffffffff, r8) 23:33:40 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:40 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:40 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1b, 0x0, 0x7, 0x23, 0x0, 0x1, 0x820, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7fffffff, 0x8}, 0x37781, 0x3, 0xbfe4, 0x4, 0x1, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x0, r0, 0x2) fork() 23:33:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2c, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2d, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1365.929936] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1365.989883] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:33:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2e, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:54 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xff0ff25e) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:54 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 7: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 6: syslog(0x2, &(0x7f0000000180)=""/124, 0x7c) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x77, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:54 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1380.331545] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:33:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2f, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:54 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1380.385164] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1380.397799] netlink: 'syz-executor.7': attribute type 10 has an invalid length. 23:33:54 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x30, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1380.459388] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:33:54 executing program 6: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0xd4, 0xcf, 0x1, 'queue0\x00', 0x1}) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() tkill(0x0, 0x1e) 23:33:54 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x40000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:33:54 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:33:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x31, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:33:54 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1380.694236] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:08 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:08 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:08 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x32, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:08 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x2000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:08 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:08 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1394.754114] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1394.784435] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x33, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:08 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000013c0)={'ip6tnl0\x00', &(0x7f0000001340)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x7, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x8000, 0x8001, 0x8001}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r4}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000c}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x10c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}}, 0x4008040) r5 = openat2(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x400, 0x20, 0xc}, 0x18) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657473696d30000008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001cc00080000"], 0x88}, 0x1, 0x0, 0x0, 0x4040004}, 0xa881) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x54) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000001040)=0x4, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000001000)=0x1dd, 0x4) r8 = socket$inet6(0xa, 0xa, 0x10000) bind$inet6(r8, &(0x7f00000012c0)={0xa, 0x4e21, 0x0, @remote, 0x43}, 0x1c) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "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"}) 23:34:09 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:09 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) lseek(0xffffffffffffffff, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x35, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:09 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc00000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:09 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1395.076503] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:25 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x7fffffffff3ff) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x36, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:25 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0xb19618d825212980, 0x0, @fd, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x1}, 0x5) fork() 23:34:25 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 7: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x400081) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x274d, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r7, r0) ioctl$LOOP_SET_STATUS(r6, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x400, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, r5, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0x5, 0x4, 0x1, 0x0, 0x7f, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb9fb, 0x4, @perf_config_ext={0x3, 0x9}, 0x40010, 0x33d, 0x9, 0x9, 0x8, 0x4, 0x8, 0x0, 0xca35, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r4, 0x0) 23:34:25 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1411.136464] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1411.154243] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x37, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:25 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:25 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, {0x9}, [@generic="2f46bb24e1a2a44e5a4f4f124cf72c827afc15152db413df0fd23512c1a292afb4146e5f6aaa81b813afd8f38ba96346f0c3f6c05c26f5677fcdcb6e2d5c07eb7dec2072d963edc1ddc6d784e63c20730255ea2d9e9a156a8247f2f351f8c86005ad5e363b069abe4541f6d40e09aa447c5689fb2ac455b3980ddd84e05c3c5a0e76e6511c0d334b1c1c2809562054"]}, 0xa4}}, 0x8800) 23:34:25 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1411.513311] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1411.556958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15655 comm=syz-executor.1 [ 1411.562615] 9pnet: Insufficient options for proto=fd [ 1411.619195] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x39, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:25 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xc000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:25 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:25 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x0, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3a, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1411.843225] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:42 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x100000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:42 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x10010, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:42 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3b, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:42 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) r2 = getpgid(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x200001) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) kcmp(r0, r2, 0x2, r3, r1) [ 1428.070573] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1428.096592] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1428.123220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16164 comm=syz-executor.1 23:34:42 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3c, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1428.222737] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:58 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x200000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:58 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0xffffeffc, 0x2, 0x1}, &(0x7f000047a000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x20b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x90200, 0x110) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="2bf10000000000002e2f66696c654700ea42323dca89586bc25c41cc2e941a6ed68188430f6f3e82d2aade9daab1884513e61a3c1b4d43673b95c8987d5b80029e46bd5d3a89"]) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x5, 0x2a0200) recvmsg$unix(r3, &(0x7f0000000700)={&(0x7f0000000380), 0x6e, &(0x7f0000000600), 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40002060) recvmsg(r4, &(0x7f00000018c0)={&(0x7f00000004c0)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000017c0)=""/112, 0x70}], 0x4, &(0x7f0000001840)=""/97, 0x61}, 0x20) ftruncate(r2, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) fstatfs(r5, &(0x7f00000000c0)=""/79) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x1000003) write$binfmt_elf64(r6, &(0x7f0000000a00)=ANY=[], 0x5bc) write$P9_RMKDIR(r6, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x80, 0x2, 0x6}}, 0x14) 23:34:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3e, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:58 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 7: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x18f00, 0x19d) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r2}, 0x14) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e24, 0x401, 0x2, 0x0, 0x20, 0xc, r2, r3}, {0x10000, 0x1f, 0xba, 0x10de, 0x3, 0x100000000, 0x0, 0x80000000}, {0x9, 0x0, 0x400, 0xffffffff}, 0x7ff000, 0x6e6bb2, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3506, 0x3, 0x0, 0x1, 0x8, 0x2, 0x40}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb86dd6096153f00103afffe800000000000000000000000000000ff020000000000000000000000007800000000000000000000000084d827328e9a0f6c6134a6fabc0d783eb00c30792db252da7a5eccb4cc8d9fda3d9f8b7bdb9b61fcaca36a3da9843e2c0847e4e62738c31639a418e8eeeaf935a10ac39db6091098d9a646d802cdcd7b9707abc9a1b7eca15e76b7d3f44a3d9b0e95d0d4edf0e1385d79ec"], 0x0) 23:34:58 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x0, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1443.922188] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1443.944933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16448 comm=syz-executor.1 [ 1443.951318] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x42, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:58 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7ff, 0x4, 0x1, {0x0, 0x0, r3}}, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(&(0x7f0000000000)=[{r3, 0x8008}, {r0, 0x10020}, {r4, 0x3000}], 0x3, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9]}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x89, 0x7, 0x8, 0x8, 0x2, 0x3e, 0x6, 0x1a0, 0x40, 0x37b, 0x1, 0x1, 0x38, 0x2, 0xfff9, 0x9, 0x8}, [{0x4, 0x7b, 0x5, 0x9, 0xbe, 0x5, 0x3, 0x3ff}], "6c958ae297b2e8bce56c8bdd1f62ebdf0a9268e99725a9c58efd517510ce116bc96d80404600e29af04a3aed60f3c45f057f9468fc06de95c741c44cab835dce40424f968beb6418e69e56a06653de23d4a5996f4072c238c9d2023ace84c575f37ec593cce64f48331c65bdb5223143611674dc5fc97ab8c64a4d24affa90288b7c386e63202c4f77fbe008b284279a0b40e41300db1a7a4bc4018cd6fe263aab609272b48f1781289e4c77f8ded093d20a1b0b2935d5b8ea4d79608f643b7aafceea066e584d", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x63f) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:34:58 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:34:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1444.216131] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1444.279247] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:34:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x46, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:34:58 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x600000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:34:58 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1444.430517] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:35:14 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x4000000000000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:35:14 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:14 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3, 0x7, 0x1, 0x3ff, 0x14}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x8012, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, 0xffffffffffffffff, 0x8000000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000080)=""/124) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x6, 0x4, 0x7f, 0x20, 0xfb, "436b0afc0626158fecfd3706a2d75e23f9028d", 0x8, 0xd5a4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x19c, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:35:14 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x48, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:14 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:14 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000441000/0x3000)=nil, 0x3000, 0x5, 0x8010, r0, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000800)=0x7, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000000080), 0x4) syz_io_uring_submit(r1, r4, &(0x7f00000007c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r7, 0x0, &(0x7f00000006c0)="7305e6292d1632cefb26652c45463bbca34ebe730986e31702cf8bdb05bd9ccbf258d60a7c7ee5b635b0fd3c250eac00c8e284b41575b95c16652cb40df5e190d7cb52a6c32478edba2f7a272cbf9668a18b0468285c46ecfba3a531353ff4a02a50400f03e7098c0ba8e17ce3832932dea41f415afaca5f1ce1399adfd5d86f960649bad53fd9b2ab1073efff2fc91ce915f81a7982fb45d1216a0b8bf76389fb2e9f0e73a2d91740334d03722b3e87c1ec3ca4fb506f4ccacbad6118c1c00beb3ed20e1d30256d4cdd221a39", 0xcd, 0x4}, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x5}, 0xc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="cfcfeaacc630204063e5d29717db08cd41c6b4b91eea30a5ca6454d8a1e4edbace3fac2ad6aba7daf8c3d4b1faa3b1a49fa0a768aecdffd4636fb4fdc68054179857ea8f6877f2ee1fd4c3e74640e476778044d7eddf99bd73d223e5a682d63026a59c8b3515c840b5ef8a9b281fe4eaad519ba2c4088023f2f8e9cc71b9e09121bf4f", 0x83}, {&(0x7f0000000340)="d576d39caf1917f786aa312814e3c49e1fedf37dac1123a2508bb3694f428a3e1bad73f4b4c88207b3d58b0bf99c4639c6439fc05e729dbfa126e0cb503985c77b3fd8b9065e77b5dd3eaae02fc04b26262faea96ac62b8c355999d7b7b25258f11ff67cdf53c4c21b1f4f0eb5bb214f2ec3413f51dcc7774fc955aca60b0e5551bdf09a99576ab9c834d7ebde0bdbc63513a85dd111759473f7cc6ea64ac80c43c42724e6606de2b7751efec82e24ccceedeb336eb14642dd0ca66658a191c27e505c17099eaee6a24e0c2a27a9b54bce2f58a1f5ff4000b8662fcee6a06500"/236, 0xec}, {&(0x7f0000000000)="13b372f23d359d81425c0037f0b8d7378ca0fd9f020000000000000007c03174145bac8a467bfb670f0a5b00c6234146188c3d2c1968", 0x36}, {&(0x7f0000000440)="0eedbb780106fbe2bd832c3eaf31ebee9dc507731ad5dc21744e30afe19c8a4dee1e98b16464c3c48329323fa650043c44e373102fa200df23551e2e9c216032a29bf565b292dced1a2f98c2a0d047e53c4d78778e8084f56981f524e138107c7e7f35e958b1aac663f9d5e62d6890c51b902cced3483eb20dcee3934505b4c70c1574ab5e80f8b1c5ba344abacd6f98271803c3844a709c695afc70db56fbdad57f5803356b0c537344181e13d643", 0xaf}, {&(0x7f0000000180)="278c3e89af609c7bee7146fd7d56d96ced5e6e6ab860fd6c595319a29c54e99d254c8f2219ddedac35c6ee304132e7a8bddf5967a536", 0x36}, {&(0x7f00000001c0)}, {&(0x7f0000000500)="086647af72069728a967037b804d2dc23c4c8681dc459e1020e0d6000f50ff0f770ce035935703361cc3227273b6d9d750cfd84a16a315dedd5c446746197b53566bdf10dde7125d50993b56c5e158bd478ae7760b0f14c2914de2e77284387eb57947855f93859f8659992b523a122b84b0347ed7b6933bf478a93203fcd7b7c41c751ac66faf9b516a24d696948854495c165415f3491320f8b96b46987184b095f6cd609ad18d2ea21c8be5c17f14674650d96a5cb5a341ed7bbd1ebf8bfba6", 0xdb}, {&(0x7f0000000600)="a1a732f8ac4ba54f0b906ddd2cef8036447dddfc794909f4e6a7397bd56935e547b494821215310fe1edc6116e0afb3365328f544a3dc34e19187d644e40fa16206dad4652d8a5124bb0317e686fbfe8413584e785c170a12966f07bcf66732f372713cd69c1d6d5401008653f45f2809adfc63949cf3515afa8545a1aadd0103bcf7b4c6a7e5ae4db41a08e826d86fa18", 0x91}], 0x8, 0x200, 0x4f, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x903, 0xea) [ 1460.777295] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1460.841321] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:35:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:15 executing program 7: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x5bc) syz_io_uring_setup(0x2ecc, &(0x7f0000001200)={0x0, 0x2, 0x10, 0x0, 0xa1, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) syz_io_uring_setup(0x1c5, &(0x7f0000001140)={0x0, 0x2585, 0x2, 0x3, 0x78, 0x0, r2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000011c0)) pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 23:35:15 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:15 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0x0, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1461.037325] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:35:15 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:15 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1461.122914] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:35:15 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() syz_io_uring_setup(0x6d89, &(0x7f0000000080)={0x0, 0x3b02, 0x20, 0x0, 0x335, 0x0, r0}, &(0x7f00009e6000/0x1000)=nil, &(0x7f000087f000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x280000, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1100, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r4, &(0x7f00000001c0), r5, 0x1, 0x0, 0x1}, 0x1) 23:35:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) read(r0, &(0x7f0000000340)=""/148, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0xf88c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x800) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000080), 0x4) pread64(r5, &(0x7f0000000180)=""/244, 0xf4, 0x400) dup(r4) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 1461.179580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 23:35:30 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4a, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:30 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 7: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x7f, 0x1f, 0x1, 0x0, 0x8001, 0x0, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x3}, 0xa60, 0x0, 0x5abf, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, r0, 0x3) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x22842, 0x0) pwrite64(r1, &(0x7f0000000280)='R', 0x1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x103081, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 23:35:30 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0xc0045878, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000000), 0x1, 0x1, 0x1, {0x0, r5}}, 0x1) fork() 23:35:30 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xff0ff25e00000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:35:30 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1476.170654] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1476.176642] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1476.215373] serio: Serial port tty35 23:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4b, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:30 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:30 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:30 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1476.469652] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1476.485957] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:35:46 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4d, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:46 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:46 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x20, 0x5, 0x26, 0x7, 0x0, 0x100000000, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000080), 0x1}, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x741e, 0x1, 0x0, 0xdc, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0xa) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/15, 0xf) 23:35:46 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xfff3ffffffff0700) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:35:46 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:46 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:46 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x17f4, 0xca01, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) ftruncate(r1, 0x2000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1492.826286] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1492.830924] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:35:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4e, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:47 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x200c0, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x222000, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat(r1, &(0x7f0000000080)='./file1\x00', 0x41, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r3, &(0x7f00000004c0)='./file0\x00', 0x200) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:35:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:47 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:47 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1493.016629] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:35:47 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1493.058780] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:35:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x300, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:35:47 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000340)=[{&(0x7f0000000380)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000000200)="000000000000000000000000b8c5c4d1b3cf4b2e2967fb770ff3010040502936f09fef04611ee1caffa16cb071350000", 0x30, 0x4e0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0011e13f31e6bfbee09b3f63b12b31e0daa4dc54fcd7760f0f7884d520001fab5b3e3b7399f067cc74fe4bc6cdba744ec3097a0e0da003083c58a7bc914c6d1ef22be1187ac6f4e40fb5b4b17dd23b8cdea6c23600000000000000017d2e5f06935fccf07037b0db00938d328a1cd4fd3e4e8a7e40b9096a693eeae78cc1461d47290587760e7af1176ed3b71a7109cb513641"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000280)={'trans=unix,', {[{@cache_loose}, {@version_L}], [{@fowner_gt={'fowner>', r1}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'smackfshat'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}}) 23:35:47 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1493.193016] EXT4-fs (loop7): unsupported descriptor size 13865 [ 1493.209047] 9pnet: p9_fd_create_unix (18326): problem connecting socket: ./file0: -111 [ 1493.220077] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1493.237523] EXT4-fs (loop7): unsupported descriptor size 13865 23:35:47 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:35:47 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x1, 0x5b, "959598dc2eb74f6ebcdc6914fcacbd869548bc07c93a7ea27ea98dfa21168dc5b3c26d949621aca0ae096cd6903a6eb2da195aca38f1fe08f82bb3f72b4bb2eeac7c5fc59544ef76bac79fa0a0c62ded4ce8764db145907d8ce339"}) fork() 23:35:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1493.290396] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:36:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x3) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:02 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="cd0c0000000000002e2f66876ca176002dfcbb0405f7dbf69fc93f"]) copy_file_range(r1, &(0x7f0000000080)=0x2000000000000, r2, 0x0, 0x3, 0x0) fork() 23:36:02 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0xffffffff00000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:36:02 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000300)=""/223) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r3, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x916f0e0b00d1ab96) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0xb9, 0x6, 0x3, 0x0, 0x3, 0x0, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x10082, 0x1ff, 0x87, 0x4, 0x8, 0x80000001, 0x0, 0x0, 0x25}, 0x0, 0x0, r1, 0xa) [ 1508.545877] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1508.568184] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1508.634254] perf: interrupt took too long (10107 > 10087), lowering kernel.perf_event_max_sample_rate to 19000 23:36:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x20000144) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:02 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:02 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1508.855095] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:03 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x80) fork() [ 1508.941432] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:36:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000007780)={'gre0\x00', &(0x7f0000007740)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x10, 0xa6, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @empty, {[@rr={0x7, 0x7, 0x63, [@loopback]}]}}}}}) sendmmsg$inet6(r0, &(0x7f000000e440)=[{{&(0x7f0000006680)={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000007700)=[{&(0x7f00000066c0)="a6c283e38c54c9ddebcb2425eda9d3916240fcda1fc139fae2898edbebd52e0538bf27c35702bb", 0x27}, {&(0x7f0000006700)="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", 0x1000}], 0x2, &(0x7f00000077c0)=[@rthdr={{0x68, 0x29, 0x39, {0x17, 0xa, 0x1, 0x1f, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}}}, @rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0x69, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @local]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x33, 0x7, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x8001, [0x2, 0x5, 0x9]}}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x87, 0x1a, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x4, 0xbb, "f694eac5358ea51544ed1ea3f0eba6b714539b3528d0de83109c1bf41691b3dd333ff280be2d258389e86ca485c3ec3e87bf7e1ce29583f25609c6c1630b77150566463a5ad15ba9f18eab534f40ddb410d9cb171a42abb37ea23e38e68998ae64fefe1fa87d66abe20158d78593841254a2ae394819e219a893bc1a9ba6e8a827093b69c6d760deb0a3f4706947f65558a8ccf241e5e704ee91c4a5188a011138727d3b059cc44deddef9845068f232a9b0e8f49e429adb8e5ca9"}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @flowinfo={{0x14, 0x29, 0xb, 0x685}}], 0x240}}, {{0x0, 0x0, &(0x7f0000009c40)=[{&(0x7f0000007a00)="57577bdaada4a678b08132c99c7b06cba34ec526ee92eb19a5604a8c0d31c764aa8da0c79c0823682a6bea300808734c0af531f75099bd93622c608c7ea18df44811557991f8714c7856746400e6d18ecef66138d99ef4545f5ece80c6686c7bd56bdaa501de54a6e227104a231c86521cc0390ac9ca5d5abdeeb6b46e3a459eb7bffa51dd44a5a85cfe2dc1e8f0334721e61af8dbeba894cb984090", 0x9c}, {&(0x7f0000007ac0)="7044080f0f996639839b35ff8b7fe1b749ace903bd97b78de0782ddcc26bce482ed152ccacb8c8e46e021c0475cceb26123d87fa5a8a14445859e28913eb5be50665c2c36bab818b715a1fa4284c6ec180ca36af1de217878e58c80843fc462583b84b", 0x63}, {&(0x7f0000007b40)="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", 0x1000}, {&(0x7f0000008b40)="2580cf563642b0b84bd6d808c9cba30b76d176fe3709289daef1415796273df10fc52f5de00b3ed952b295d9ab9faab612e88d276b0023869aac13ae6f1ef389e41220df5870d970af83424ea6b2a668408c94d12e38cbacc22abc323b51a279c93cb82e49a8fbbc98f5a1b72475576f3cac727d6b49a7365c4a612fbbdafcb799725cf9f4a7312b1a0cbace5208f1a379f8692003e5ecc779aa2ea32efc1e8ea5469f2b7a9c8eba7d10e8e6b39cac6d084e99cbfb059a176f0a8ff69858a2c7c7435b3c94bebf32a650aaa59148ee2a34dc0ca40815ffd6c6ee36e1", 0xdc}, {&(0x7f0000008c40)="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", 0x1000}], 0x5, &(0x7f0000009cc0)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0x2, 0x10, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0x9, 0x1, [0x4, 0x4b33, 0x7, 0x85e, 0x6, 0x4, 0x9, 0x9, 0x7, 0x1]}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x89, 0x11, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x8000, [0x800, 0x1, 0x1, 0x101]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x800, [0xf3]}}, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x40}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}], 0x1b0}}, {{&(0x7f0000009e80)={0xa, 0x4e24, 0x1000, @remote, 0x5}, 0x1c, &(0x7f000000b2c0)=[{&(0x7f0000009ec0)="79701c275cd4c2eb6cf5f692d252f7d8831886c0719f96ee05799e05b3cc4d42faadc0e5bdf1f38608df7983c468e39aee0fa922b77e6dad226d13ada6a809505dfdcc85e360314c5b30b3c061f072b68760429b15f53427b3c1898f4dd7d3f3307b574198a11081c4b63e533b09afb1570e20a61e", 0x75}, {&(0x7f0000009f40)="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", 0x1000}, {&(0x7f000000af40)="34e825c78fdc676079c14749901f93bf4e4b8b73a663e4a7", 0x18}, {&(0x7f000000af80)="d1e1ed6a2d7453da1628d745e92926ef1a34c545ccce0966f91e42ee21f5715b5a78b5a96247f92c0e09114a0aa81f2347edee67087bfb19ce9f6bc67173a68d6ef5db7a5eb2ad5f1650e0b28e73850245abe46962d40beba97b7bcd4347fe46131c55c8c59c8d7e3e7e6fc589ac08059f4714d45aa5944a6555e14c0b18909f7fddd02587a0c8011a1b390f5edbc41ad5ea1b9d5dfcd7b0dd4b8e5e43b329a1e766b1e28f4c6927476f50981a604a5fcba56f5b3326e729", 0xb8}, {&(0x7f000000b040)="6914f0d4d8", 0x5}, {&(0x7f000000b080)="23a9a002ec8b1553bcac599b2dac4165a32e871d9df96a96ebf4382715b300e97f734b02e05edba995c2e046c3681d4b77e55c0d0b56e96602be41244485a4d640f14d36144f96557767d78a4bbf08984d5eba9819d34a63342cb9b27c80873d9b7232a4ba41154b8102b02cc1303f82a284bb", 0x73}, {&(0x7f000000b100)="8153f2faa3f521a796c7476f42f70623d8978b5b81c4cf029bdebac812aaa97bc86e56dc828e7a5c3079ab966d9bda3a4fc1610344c869ff47d2cd18646712f2b73c0df9561e178211a768f1be852d361f7d1a58f1982e1dde5e07e48254ee38acbaebc11565f1cc7e298ab2070583057a330696d2da8f2ced25fdeb1a399ca5c19520f2b37b66353d6c64f68892f5698a2ffff01644454a651bf6524f2b8fea1ce7901828920c", 0xa7}, {&(0x7f000000b1c0)="c1efd658014a0b78be1310879dad51abf2c27a1b7035f9b94ebd8674ecbc05435fc27ed8cf8d61279188e884a10a9892e81f10fbf09d05390d1bd206d673396eb018ee488153a6a00979786411c0c36ecd2e2760c0353b6dccd87775ff3ccb389bd66de1ffbb84e8b46cbbea3eb2c7298695bbcd6aad86bd3f04fa3995b0f0060b2e1cedc1d1530e587f0272a8ae22764579a0d395f97c3de357749f23e2b5f135141191751b030147b5197966057078b0e4ecd754cda1e5ee8efe", 0xbb}, {&(0x7f000000b280)="f858bcba92e26a3f185f495e4618ab9db0e78c5fbdf2aefe8148764d9419edac81b5ea9a", 0x24}], 0x9, &(0x7f000000b380)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x89, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts_2292={{0x1048, 0x29, 0x4, {0x88, 0x205, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0xf7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @private0}]}}}, @dstopts={{0x128, 0x29, 0x37, {0x2b, 0x21, '\x00', [@pad1, @generic={0xff, 0x59, "cd7c0bf16e73f80c1372702e881b01213e4552b87f04f4e100860a6db5e0401d7f8b8227586dd03cd97482a23e2459617ad83967bb28a1a81c9abbc1136f81289a15ed6810dcfbcec96615989b9b01fd7c8cdaf915b8637117"}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x6, [0xfb, 0x6, 0x0]}}, @ra={0x5, 0x2, 0x75e}, @pad1, @generic={0x4, 0x5e, "f7365fd4fa09fbe837917dca914701757f4fb166cac54f27634aabe4a86e1b875fad205a004dc1f4992f4145ad154c0d11ebae7aa1ac7696ef4f002b34062bddd39701f575ff22aad9fea4ea8c43a301aae88ad5c61382aa7ad25520832c"}, @generic={0x80, 0x14, "899e355e3a425c5f4a451002ad1a29cba567d98f"}]}}}, @dstopts={{0x58, 0x29, 0x37, {0xff, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0x1ff}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim]}}}, @hopopts={{0x2b8, 0x29, 0x36, {0x88, 0x53, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x20, 0xd6, "ff3d84e34344af77bbfc0c010852f7fa1c3f454b8a3c04985b4fc917a4c51c0ce0e407fdcda30fafcb51c1d25a13123f5eb6306e9e983fd0b89a89cd672dd8ed3ae4c203362d364543bb10d81cdfa5a73158551fd825cbe0cfece5b2781d3c49415b6f9aca5dbc9d5856ea83e2461a00383cb76735a3ffe630e82fbd7792452036840eeb2b2ba27ac962a30c7852585772fd00c1409494d6ba43a62f8f6180a7799cad932fe71ec6d28410642da2617251ba1e9be3272aec0e9be03eb9dc7f6c35c99c03c62118da8e85827111ed2ac283cc768e559f"}, @padn={0x1, 0x1, [0x0]}, @generic={0x1c, 0xdd, "3788315fc38b39d02ce97cfe7bdd3e8c7f8c0c81995cf1f8875b4b9c58e6c16b0fecff22b5ebe62cec62e56a54dbe3f1015ec22995fc2f7bb0dd0c8812bfacdb5d5cc5d70d645c062c8ba38c27675a30394582d6070acad86dfade6d15d425aee0dfca848c0150acb46953337cc674883ce23f9011274bfda72d27ade10737d84ea09565d9d351a987e9590d7b12822137b5295537bfa8f2bd9e0d3324893a236d121f1ac0daa45de31b39cf8fe535d97e196de3618b7675d25d8b4409cf23e9bafe75419046fba08093cd92d90d644fe7b735f2dd0879c6204605fe5d"}, @ra={0x5, 0x2, 0x7}, @jumbo, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x400, [0xaa23, 0x7, 0x0, 0x1, 0x11, 0x3, 0x2]}}, @generic={0x5, 0x81, "e9ded651929c0a0b215200b375e8ea8af37679b4066de35bd9aff5acbdc76de0871615eeb82dd33b13f570095259ca8b3a49ab871ad6de045307ac9a71580fefe017e221f8d838ed1cad63489c3e3cb7e08589c4fc45f5a77eac4d008f53c5b10d2025833f88e3480aa8357aa4db24761d9a2bd269722fa0729f8e1e2987f26729"}, @calipso={0x7, 0x8, {0x2, 0x0, 0xa6, 0x3f}}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}], 0x1500}}, {{&(0x7f000000c880)={0xa, 0x4e21, 0xcf34, @private2, 0x3}, 0x1c, &(0x7f000000cd40)=[{&(0x7f000000c8c0)="4ec0bf818292ae7b60cfb1a3284b185d1ce2d8ce3cd0acb4068cbc798909732a142eaf", 0x23}, {&(0x7f000000c900)="79d7ec70f299207ea26703124f89b10bcd13e45bb313fe389ed46820b59d7f11a7e1b78906b96e147ba72bd3a084c2fe7b7eaaa5ec600cdd33e21eb327f63c9acce0fb68dd4ac0e2d67f4b3a56166bb531fefec168b7510a6cd63601136ba96e1253a60bedcf062777b0e58e7cec997b7ee9d1bf486849bc2e5da94ba3dfa73eb0e371e1096317a1dc7345c610d04aba7f6f0493261730483951b681d3e3713836c5785b2b", 0xa5}, {&(0x7f000000c9c0)="8684b82cadab0b8ad62fbef8f492fc0ef56a12c8d01e603db9ab3d47a83ae3ff2d1d065cfcdc1261c265a47560ad585b7221894f1bd43eb16f5d1a9dd1df4087fd51458576e8d7b952576d1d6dbed74dd453808af5f8e8fcaa5112e9a8f64919efa90493481d0a8031ef4dbecd7dde294ec650be10c5cb4151c9b465ee80a6d845032350d8ea905d1920a7d7cf0cb7cbf821c891dacc3191d4200b65b7648e16bbdd845aa8a2cd9abdda2f88100a94d073ebce12aa", 0xb5}, {&(0x7f000000ca80)="df4a0be1303fd67efaefdd41513df4c4541749fb4b60e93a028f32ce6d533e2b1788f5f212491cbfa518e89dc21d93aeac933e4a91fe10d5694953cddc26bf02e853aa1789962082a104ddf0ca7f6a8b0f15cacb62d8b09d0e957398448fcc03630f1ddba558da994c3122f24d5ae35d83ae52bbf4f53a7352f2cf137d215f52eaa5adae1e9527fd379797a7e947a6a8239efe8d3c5ffe690ff0b86ebaf9b43ca0dd5121ad66de1d", 0xa8}, {&(0x7f000000cb40)="d466a7b0438d3e90fa9a2b5df19610c3a01598b82427ff22d36948e8c7da4f418f97e760d7b167b03998fa6b75fb93c4e3d15a7d3fd879f0587bf857d0291404a15f169cdd", 0x45}, {&(0x7f000000cbc0)="c8df406e0241cf0c3482c8484771a94b22223088373877fd1d9c5bda1ebcc4a5bef52f787553621093dfd14e9ca50ba04fb4b97564e22d62d2532f52baa9c12de1531f274fa2c3cc1094ffb7608ea7fc1b9452e1e755b483aae447dbf000e61513cfdaa18c59d806f15c74ed7cdeb521b79b6800274ef424f085dd0a4aed34ce6643ef1408f7f57dc6d2f5999340f4905c1f0c9716e697b9dfe3c7dcdfc1ee39d3c54fde614fee186b8a5b7f", 0xac}, {&(0x7f000000cc80)="f92aa3681584edc71c651ac6848b6c5ed645b4a974d388c48415f3c7e46aeecb8539347d2a8a0e9c6cc07d27f97a8acb748280c2a45be8649f5c64d698cf35cb048118d88168c641193bcba914d09645965d1753452c23a99efa994812472e58c555be285a5dab456355518d497936bf68189f0159d7fd89350ee2679c2ce77029943f9b08bd7977b3e87d702e68bd4de36f5b6c856d86aabe3c9f84", 0x9c}], 0x7, &(0x7f000000cdc0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x70}}, {{&(0x7f000000ce40)={0xa, 0x4e24, 0x6, @remote, 0x5}, 0x1c, &(0x7f000000d080)=[{&(0x7f000000ce80)="43c30821d3e327e1b05faeb921df933fe366a345277f3f225b30e1006039649505a2c9c5336c06c36ae6d180662cdfe3eaf5e68ef338685c035305241a616060f4e7c9e79a893a7b9e8e43c105aab6d270d625681941877a2f6ff17d7ddeb0eae1dd7ae420387a9318a8bfdbf2800c88a40b7ebc6e345941e0164191587eafd43580e5b4aee76744c4f570f7e8687e05a1", 0x91}, {&(0x7f000000cf40)="85bf535f801b19f16e6fe678ed09b270785992d26188c934263f19cdf6433f4e9397aac18fab1003513d5a8543fbaf07e1ada65f67b33cae828b4b1e523c620602877d0726b4e476b33a5aa03cfaa90b1e86e0533cae615acdd14064895252ac7fe0cabd75cb1bacfe8dc9f9297dedde4d347865268de9852f1a5316c1957eb1e301c57a00d7af507dedef273e9ac632ec239ad4743c1836b5e3e448dde193ca", 0xa0}, {&(0x7f000000d000)="d69d0c732b586c1d3b57d871c54414f003c5037b54183e51e53efe32b71b69ef7d6ab2973ab7827089c8096a655caa9da786c686d71536be93b1bebd3cd35a0c40e2f60a0fc90bec97e323e8ed58675efca9f69b2f5875e4ca9ab90b5213842d1bed39c9f8bb6d7e71cc86b47a6c0bf887ddaba6288dda2f63a0e6833c3ced", 0x7f}], 0x3, &(0x7f000000d0c0)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3f, 0xb2, [0x0]}}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x1, [0x0]}]}}}], 0x40}}, {{&(0x7f000000d100)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc07}, 0x1c, &(0x7f000000e240)=[{&(0x7f000000d140)="476958e5aa2b30a4d3d2acfb7030ee57f29b82bc58660ae60b5d35bbdd769c62a289d80f01f11d2fc0fe9791eb5a7c115c7dce9dced6748fd27cf7a7f06172c44b8c901a05edf5810888690632d4dbd094a94620059a434a9fdd196cb91a4ac154ef6c4e91e49cccf8d768c7e6117accc3367a83f0", 0x75}, {&(0x7f000000d1c0)="7626b476703ba8efd78ccab2dc25c1c3614faf1ab690b8d6d8b164a1a6", 0x1d}, {&(0x7f000000d200)="cbaa31facfa37240ee48f1eecdbbf38527f7ce2923073ec411401acba474b680f3bb54e0d533a64e4088234b81a873d9f9dadba26c55f43faea6140b7a2db4bccfb323a4c9c9d626272ef2060951b2275d57497180ffa28e7cb4e0f6ec395d5800081dcbac9efdd0d6660a7411d1c76b04b56981dad27e36b943195fc657d1900c870f5a7dfb7b0daa2ffe88bee0e3120cbf42ac6e17d03d9f9d32e42e88d1706c6f5ff25ebc9ae19aafcf7b1cafa131059d97a4a67d2b6ceec97a6e683a655aa89571ee354c28f2912927f803065fbe4b778d69eaa70a7100eeb69e3bb47f704134f09e7ccaf5c3aaa5ca442f3928b0ba829adfcfdd58e447b0fe8ff7f015c48965ca0332f4e29e14d7e31cbd0fcbca6b7e416bb15113fb08f7b2574b78589a0bee7ea53e59c5d276cffd569efe80f763eac663aae01f3d32647110a4e8077082f0750bfae239bfda67b1661efe5bd0aa087d1b5f364848f3aee36c7214493a0408fd72ff5b2e052f63381c33da1470ed05eccf64713b7a7565797f8ea9ea8b0515c93fc6444ba465100f5eac3f628e42b96770b29e81607410b38fe886bc1f418dd2d36884a77c6b251012aeb42752c502f5bfd6619cbdacc02e0998c624ab8a82262bc857f373d647ae249a99df392d5491e11f24a41b8d14e6805e0eec6b1b80326ae08609acfad9feb88f58e4406ed8c6dbf9f9dc52407842981aa4c9fa2db22a8a4142a2a471d7ca037dec721d4cf26bfdd80ec576485bf7e8b7005a6aa884ebfa85fb1367eb7546433ce744517273b665b6b9258908f153eeff781bf71d1761379e53d0f7c9fc164d3566ac69bf320a2b9cb3b812703e0958426bff277adb024cbed1773790e59cb12865997132d23121793d203f464a2edd91ea5a082c41e6c1020bc07b0399b1fb270282e465e1b73695bb84f94b791b898c61fb3242655d303989c4a98f6716bce19bad19778aff52d20a1323304b1cfd4b0b0d275be2cda15ed3327224b73440da60312961f30400fe478eacb7efa7757c6c29ebc03cae0edd9a314e4a8c9ca4604220f82a5e2da182b1c3a9492cbd2c4061c950b0ceca259893db760110f45f48bbd6ce98c457d0086dae906deb46333ee3471ab3bee1a14a010057a07053fbef16bea5e236eed5a18f6d1456a11381f8bc5886856212332fac7ccf2ed23583282728d679b7f63114f73817a7c88c0e3e4b2b36ce8a363c207e52cdea545bc6670d366aa5bb47b49ed2cd802e423ce8298000a560b078707a3e10960f44a1ccdb11e1bdf3f2a591a22248f2df74a956e42f7205d4daecb218cf7a5e61fde03a88e731a63abf81bd6781d1b85772d489d12ad5b22175fdfead01104387696850d75f7cfa2d47b23213994da8d79d36c3e9c4eb373f2a33cb4549ecf4bdc64e54b5dffa6ca428ac60ad5ffba65efd1c852b1d626286fd319526292d2ecf5a3e6ce167b48e52a58da1873451873730198d266d676050bef01f28fbe185d71c10e0cc1d1c746e449f00c6ee1c8e6b86f0b209db82da2615a0ce5cab3c68ed5559a3dadcfdc65e4c3e0b2d0bfebd48716b5027f1225589a4423873b69ca9ee72cc09fab06878283a880f4be6f49a28e13d12c6c278dfee91b6ccb0b13ab8f5758579d06ed2721916152e29a0c718876232a045f708ffd5542a43e5721912eef6c1dfbc91983238de068866d0e2eb9d6a5523a6870eab823d0b408fdeb8619df423fcef6b9c08845396763cce41578db546f93a3268a83c1409b53ed314514189995ec56ca95019f761c986c943376ed950dbb5b1113dd10259e6e972088a0d75bafd20d936d9ed854f03a03a4c5d7aec578977ee8f0f712047ec74b9a7753e6b70f4ed5896c85455beee67b7a898757f928d4cf508ddb11c537d9bf83c661a082b51f42ad4ac3853b622801f558594ab819a05a32cad942971d69f088200cd3cd1b30cfdbfba1ae0754aa52247099534a50aed42ca1c3609dbd2104b3d950a7bdc2c2884685b15dd67585c1dc6915a08f67d3628f458d42b4945dba670f6ebbde55ac86ece82b7cc863f3b1d89c1da7b04ff2ae8c766bc6e1b2706b89dcc3ff830bd30dcf2b467c9f1a9125c5ee7a4dadd4d7def10fcb8fdc411b44c64509b2f82210b1cf05b9be1a6acd786c5f4c5eadf7d8d37727d2b05aa79980128a4344e13d8c3e7574cfc53c0c068bb2a60fde2fe8b28f68b584fea83fd05b17dd3c6e33c2ee9f3e9bd5724535a85c2627e13752e59b9d98fd6f38720043753ab655ec4d3476c4761ad065d7d00dc969e9b64368d576e578c5aaa69e9dd4cad4e24e0d3176302b9327f5322caf80bf08fb930e7c9f720745d10780a009d4686a71f26a615712709b63860d609a1c02cd9a81bfb2de607aa5e8e70b6acc3049885b4e6b4acd05a33ef53a412377651d964b867570e0c4ceac45727f904f9f6d7c77833a684ffaf9360f0a0457e660dfb52c5ae7d0af77fa9bbe0451e96a15b4d15535d2a53aebb4f622913ce2bedb17c65ecb3cdd0c719131bc5b0c5258b1ef199b4ea87ca9c0e2569aa5b328e10497aedc50f8a71b960d192d98907934f9e201dc75521deeef6c4fe10ace660c0cb46080b890ddc7761519c25d160d9912e9a13a308acd3f4c6622aa8ce5450a7cd7a8b1a3fae9f88f87e8433b05f436773e521ac101e33ae30a53079dff96d8a17990bc911375d8f5292c9a3a09a0e3fb2b265ce25a0dbb74fb73cb26637f96755ee1e1d9eb833616730e76755b353a59afd93f4b1464c2210dc5796e227d92ce3591e1a5f684eb17487e1837d16e9d67ed4da31f5390b1a0a0ba4de389c44aa1b3de15dadd9b172417aaf96f97c178eb24a905d418aa9337be704d1beac77f2bf21de6f5c53a88ad6b0a737555d140794227251a998289835e896d291360460a9a8b2742fef87f584d68b2619765995c8e7472dbd4047a2965286faa37bb1a6acfd08c1a2336f5cde07c1b70d70f7150d3097a33a0b2fe89351ad3706780db118f48ed98ee82a612c38df55ae78cee9a9f51fbf695287626f50cb8087711fab239d451f8e0fa95ba5bbfd806363f6723b946dd2ac4d6647833b4f20c8f3f494011431784454fa9491df8e3039863b31bb01547de17200a0a8c9deeec5d3b42f3b3899f72a3e9dbb799c370100cc0425d9317efeee76cb516aa60634a6470ff4c70e8d0b18bf302c8e671c1de9383a8a31c35d0804c24bd97cf8b3106c031ed8bb8cf3ac586e71b1deda7675876a707b8b45d5c523082402bdc5044c4a8cd366e0f8dbdaa8b7a57482f93fbdcc962ffb387021e61ab4ee3788e5c62c6b98dd66911badf5aac737c74b5233cb18391d0cf4c15165ebf5e12bac4030d486395ea991731c4a710ad248fcaf165dfc2b032ca2b1a879605884388695e33a883d88176497ba2f4ada0ce834022a55881bc1becc40659b416dfea020a3ccaa66c424c2b844a0f6df89c4c7991f602181a285232f15b839251748c0f6bb875c858a2e09ab461b932c81fbf81f2dfc8f4d093b28145de5aa155dedce60aa1516fb6d561cbee5fb8f364c061de3334aa7ceb587c2a72cddb3abf47780e3cb1a8254e2a08f784fe1fcc03723b20a636008c4c0a8b8d54e80a4f3a591818d3671589c609653d5aa60352e72ba98899e4981623363523abb2ad013b3d2af8027d7785a10404b3919cecebfcc2630b1387bc0a983268fb12179ee8053fab3ae5023f1788f2cdd2ed331adb9937fb7db547785319a40f2cb04c4c5e39aa308309281a894018cacd45525d868e74e090f12bcfdb1e1d351ffabc4786f917da23abafccdd039c16dbcd50107ceb0cadca7e15bd91a5eda32f24fe8da020e715818465667998e539d17beee46214f7874f9d61135d45374d7fecb0684e5b4e46b49eaae84006db55ec55a7c74babeb9928a5e2a797af2df92b12bb7a7dd9d9389593354129ac34988d7d8a52107a689085f71fc54098f135b90cdcdc36ec1d8cc7be85126dc78efe4f16f45aae391600a1ec4387124a186708454a94fabfac3253e90d3f0c972282a61c8c6439043df60179c44c1b0949a710f9621d2900aa5a2286448e8c3c75be11ca5cdd15df104d88d25c5ab5ce80bb822049855b6dd963d7ddfa0c112050021eba6de6d7d880e260170504e3fc4fcc41df63c408c561ed7eed53e28958f48646daca16f3fa658c9f46d861507ee46b62f0d3becfdafdb761cd7b6e11378076ba50e9a5ae5d5576d072fa453929dbaf64fbf374e9fa687ff0add1099735d6bd86eb9fa505ff29c196d7340369fc12b829e2bf5bde2b85ed9365608913d9eb498d751229630a2652da8b954d5b420e6799e8f11ca394f677fc3e6cd82de3799bfa1ab60f94469baf8fa78789f2f17a00441d7195a08d15fc1b434db33de7bbd445580e3df9bb218a7598837a1a55034cf573e7b723707c4c32c311e99a4502313c1f092e20ab4bdaf06886d0ca86c8031309c49c177ee73920efe7e610bf23be1628339c7c871761fdcc76103f576583bdc1577f1204f388f4dd9e8aa5e800f35deecc4fc0db386d00f6a95e7abbc1ef986e69a21c23a5a0719185fffa533cb748961baf4807d67b6ca945de87b546bd37069d47df488dd870089d838541f498f4c75989f36edb09711c7dac27b46ae6a8433316ae1dc94d6d36a401070612fe7589f33c46dac9405ba913023ef17d0a7e7bf2b24a5a2fa7d73ff20ee6408befd378cd63319b1c46155d51ca2d6520f988ba72f46ae29d403e3a8fc790ce575665ebd4bd319c163e920dfad5526bd0d6e700d27c07c2f3b71daad9bd265efd90ba8fc608218c010233529852729b7abb4e08fb301a4e381399858af4985985071a075472d52d8f991564670a3039163c0350bd2e5c18b96b4b0afb72a751da0b903a259083500b0502b929a993ff9f21ecc00be5506b256af34575259af079e3b9e54b7f713c712e72cdec3bbe8b1ecee7922b671d216bbe4966a5570ee7c75577a4ed6510602aedef851d717fc51e3678588b625f655c59e6c50ef7051c3aa1b1625a2711039a589445a8048feb6175ff4938c30734823b0dd7173449cf68376b5821910f9fc0f02ad1752b38b1efe0ebd6edb76d9a1b1ce3e666e8fff412b7e5185f88f384a42427623df9c3b38671492547b2e8b789b9a402970ebf4da55e5bf92a35863e15ce42b2e8350f24b68779bb9c699d27f40d40a03ab645fc2774d5f4189f86b5edb7cb110f7de61269c9248bacf50feb199adc6327a4e1ec1d6b94019eb6e97d932ef3de7515d7aaaedf7f87f159010f9c4dc824a2b3ee9630db40f5ee2c90ac4625c38a164fbc62f38ced7e8152fe6865921e6aa40cfae24924f71b2e97ee2483697acf76e4be646b7516df240f7a13e91fcb7e1fc36970c86c2534a84c3d87d25d40902389b2c70bc3001b14665ab6a41bfa1a35a267cca2ba0c0af880daedaffed453b59ee9808caf3df8aff0d99d684108b854fa7d2d5ad4a83550e11648938c2961929ead6adacafb183efd96bcd2016adb7334ffd6a1fbfb4c519e8da207e562b714c6003c5823da4ebb748fa5d5fd0e34c1de758b1499f0371ede04b96e196a926a581b76e5a03f58f8737223f61be24ae8904c4d78dfb4f948de911629bb98d7388a00c2c2f46c668da689ed24b0d9dd9b9b64c53b595f458022d51201df906087255f69517ee43c26087ac8cfdfab5e7ebea9317a1d8441e156707df18b068574d436011e4c75a4498aa0a79fde6466422e3698700bbf4c6fa76f8518ebd8e527a3b", 0x1000}, {&(0x7f000000e200)="52c212a08b762f2c5a2c5b5ce7a2cbab5b84b9a85a2cbe526d9d655e42d768b8a5c377215a2369bf9658", 0x2a}], 0x4, &(0x7f000000e280)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x2, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x81, 0x9f, [0x7fff, 0x1, 0x2, 0x7fff, 0x1000]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x9, [0x0, 0x101]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffb}]}}}, @flowinfo={{0x14}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x2e, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x1, 0xa, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xf1, 0x1, [0x10000, 0x7, 0x5, 0x9, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x190}}], 0x6, 0x810) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) clock_gettime(0x0, &(0x7f0000006600)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000063c0)=[{{&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/90, 0x5a}], 0x1, &(0x7f0000000200)=""/4096, 0x1000}, 0x800}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/18, 0x12}, {&(0x7f0000002240)=""/58, 0x3a}, {&(0x7f0000002280)=""/71, 0x47}, {&(0x7f0000002300)=""/83, 0x53}, {&(0x7f0000002380)=""/42, 0x2a}, {&(0x7f00000023c0)=""/113, 0x71}], 0x7, &(0x7f00000024c0)=""/78, 0x4e}, 0x6}, {{&(0x7f0000002540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000025c0)=""/173, 0xad}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/19, 0x13}], 0x3, &(0x7f0000003700)=""/84, 0x54}, 0x9}, {{&(0x7f0000003780)=@x25, 0x80, &(0x7f0000003880)=[{&(0x7f0000003800)=""/70, 0x46}], 0x1, &(0x7f00000038c0)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f00000048c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004940)=""/166, 0xa6}, {&(0x7f0000004a00)=""/102, 0x66}, {&(0x7f0000004a80)=""/55, 0x37}, {&(0x7f0000004ac0)=""/47, 0x2f}], 0x4, &(0x7f0000004b40)=""/121, 0x79}, 0x5}, {{&(0x7f0000004bc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000004c40)=""/10, 0xa}, {&(0x7f0000004c80)=""/243, 0xf3}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/95, 0x5f}, {&(0x7f0000005e00)=""/47, 0x2f}], 0x5, &(0x7f0000005ec0)=""/133, 0x85}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005f80)=""/38, 0x26}], 0x1, &(0x7f0000006000)=""/87, 0x57}, 0xffff}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000006080)=""/96, 0x60}], 0x1}, 0x9}, {{&(0x7f0000006140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000006380)=[{&(0x7f00000061c0)=""/217, 0xd9}, {&(0x7f00000062c0)=""/170, 0xaa}], 0x2}, 0x5}], 0x9, 0x10002, &(0x7f0000006640)={r3, r4+10000000}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:03 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:03 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) memfd_create(&(0x7f0000000000)='{@\\:\x00', 0x2) fork() [ 1509.130845] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') r1 = getpgid(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x200001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x2f, 0x1f, 0x0, 0x7fff, 0x50200, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x54a01, 0x7ff, 0x5, 0x6, 0x4, 0x3, 0x401, 0x0, 0x8, 0x0, 0x6}, r1, 0x9, r2, 0x1) read(r0, &(0x7f00000002c0)=""/218, 0xda) 23:36:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0x0, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e60, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) signalfd(r0, &(0x7f00000002c0), 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'veth1_to_bond\x00', {0x400}, 0x7fff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2, 0x8}}, './file0\x00'}) ftruncate(r1, 0x1000003) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) r3 = openat(r1, 0x0, 0x381001, 0x42) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x8de, 0x4) r5 = dup2(r3, r4) sendfile(r5, 0xffffffffffffffff, 0x0, 0x200) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f00000001c0)="a15963ba326d602bf4be17dd0905977d0ec6e311d277109c73e2b86fbe85a346385bc774b94ea8c57595693240d9dab423edf9ce101d36ea3646d9ddcf4f27093af4a24fad8a5ed1cfc9a89b911f4d9a7b7bf7fa2708e1f8116c5c2411ca0cc0739e37dca83bc54f3537a012522245f6a78ccd9fc352d9ac591c2ac81569a877184911405bbbb7fed92fad23") 23:36:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:36:19 executing program 4: syz_io_uring_setup(0x1173, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1f012, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) openat(r1, &(0x7f0000000080)='./file0\x00', 0x101000, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1525.264017] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1525.269444] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1525.427189] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1525.429522] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1525.479058] ALSA: seq fatal error: cannot create timer (-19) 23:36:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1525.539883] ALSA: seq fatal error: cannot create timer (-19) 23:36:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0x0, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1525.577721] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:36:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4fe2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) write$binfmt_elf64(r1, &(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c768f3b754e06632d5389f1d371e39205ff66e53df6ae50a9cd9113d1eb8fe4f93419336199b4d9ed4c9a43ea4fd1fbce800a081b4e5def127f68e72dbce226cad6a9c0564ce5dbdba1260033307616c7bbbca2a26fb1db7d58dc181e79ed59ee3076f4c18d99b124453c517bbac792f5a595"], 0xfdef) io_destroy(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9b00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x3, 0x8000008000) [ 1525.606470] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x200, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000180)=@caif=@rfm, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f0000000400)=""/57, 0x39}], 0x5, &(0x7f0000000c00)=""/86, 0x56}, 0x6}, {{&(0x7f0000000540), 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/52, 0x34}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/205, 0xcd}], 0x6, &(0x7f0000000ac0)=""/147, 0x93}, 0x8}], 0x2, 0x62, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) shutdown(r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x9, 0x1, 0x2, 0x3}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="d60f8e14ed1af7b2fa644915bd58e81c5e5f7fac1105e966a295720e1c2342b036e7860d9025e19ad6ce21becc4217b09fb80c4ce1581ad1e06fd8883dc23f18c22de095c5e6299541831e5b7a6eeee5ba1db84a89e8b74bd67673d7c1414c775be9b3aa1ae65f4e03de304dde7867f3bb92a423b287adb29e", 0x79}, {&(0x7f0000000e40)="994681a20a4354cf89f3eba53eee4330871497ff5218d5a9a6c16c1d628f8f83512a7336b321d570064678262a5649e3d002aed6fe3d51c1144073fb3048c1bc6b2289ab09b5641cc1aa70111ea4ba03e046c6dfeb1ee29a5eb20b7b54b9bef45de39836b6679806dee78597fcd0fbfafea588042b44c2122f1816db1309daa49e0cc1de7f657047865fe44f4b99984554903127987abaafc4a6101070f5ab64f2b06f33482dc73de9084de294e00a7a122fb493ee79f44839c7", 0xba}, {&(0x7f0000000f00)="9421ae50f0ca1ef53c16a6f6efe6ddb019f147d7874296e0", 0x18}, {&(0x7f0000000f40)="6c53a976240424b5b3b3e9a9447a9ee58c7da3ad6eed239f741f2dfd113eed0da38a406a8badb0e6dde288f67044669fb4cb2500b6428bff6ad47aaa8fbfa8a7350cc781b213edac61b14636c6b64b55b29d0056b2a2e090f34782a863af664a0ed9697464c74d20cd482b37058c96dbd3c05c373c49a2346780f41433214c8caebee5bbf36ed76d6ee1eadcc5b98e76765b34a71538feb6dfa88607d29b52f65aaa2f", 0xa3}, {&(0x7f0000001000)="d115ff30fcae236ccb80dde8d524633a0ae7ae4dfab8f02db202e19b2acdb93ea10049cad14fd208bf7dac84ab113cc24890738bb2a4830ab40b4f8ea32ef8013d2f39272f58fc67fec081a330f05778a40f6d097e79ac0b3c432cabaa2a1982ab7432040019a56e2e90bd6405a4db6e19e20e9bcf4709c426afea76e44543e0fc3fc2b7d063e4984c7e3384241738ac6c7d29f59227af7c9148f8cf9c05708fcbc9c2a9ec3cd870556e8d5fa20905d16e681a4f9700547f00d53e", 0xbb}, {&(0x7f0000001280)="cc267aa2d23fbfde91165a80316d286d5395152c98353ce7c9aab048628072fb60fd033b7be922fe5787f1d680996423aa379f5f8106e13df49b633437a2799637a4bc50e052df3929a80b593cd3d15a2b9c9ea217ad06fbec742edfc051e3056d25f7760938f8036e544974ad52ac4971744182460fa9bc6db5a21d2fb800ffcbfbb6a5730cc1690c1c1092f2d5259ffef4fc3bd5c12b5a9cbe7a2ed8987e44f9321c421c2ee7fede1c52c3a210fbf5c4b1c80004632c9993601df336ce74759987d20c937ecf1874d10110b7385878264e5b0e6f774a", 0xd7}], 0x6}, 0x1) syz_io_uring_setup(0x5b30, &(0x7f0000000d40)={0x0, 0x973a, 0x20, 0x2, 0x3e1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000d00)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1527.590959] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1527.593175] CPU: 0 PID: 288 Comm: syz-executor.5 Not tainted 5.10.205 #1 [ 1527.594384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.595906] Call Trace: [ 1527.596403] dump_stack+0x107/0x167 [ 1527.597072] dump_header+0x106/0x655 [ 1527.597741] oom_kill_process.cold+0x10/0x15 [ 1527.598524] out_of_memory+0x1149/0x1440 [ 1527.599258] ? oom_killer_disable+0x280/0x280 [ 1527.600053] ? mutex_trylock+0x237/0x2b0 [ 1527.600800] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1527.601867] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1527.602952] ? lock_acquire+0x177/0x470 [ 1527.603673] ? warn_alloc+0x190/0x190 [ 1527.604412] __alloc_pages_nodemask+0x51d/0x600 [ 1527.605275] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1527.606369] ? find_get_entry+0x2c8/0x740 [ 1527.607119] alloc_pages_current+0x187/0x280 [ 1527.607915] __page_cache_alloc+0x2d2/0x360 [ 1527.608696] pagecache_get_page+0x2c7/0xc80 [ 1527.609471] filemap_fault+0x177d/0x2210 [ 1527.610207] ? read_cache_page_gfp+0x30/0x30 [ 1527.610990] ? handle_mm_fault+0x28b1/0x3500 [ 1527.611772] ? lock_downgrade+0x6d0/0x6d0 [ 1527.612548] ext4_filemap_fault+0x87/0xc0 [ 1527.613285] __do_fault+0x113/0x410 [ 1527.613940] handle_mm_fault+0x1e53/0x3500 [ 1527.614708] ? __pmd_alloc+0x5e0/0x5e0 [ 1527.615414] ? vmacache_find+0x55/0x2a0 [ 1527.616129] ? vmacache_update+0xce/0x140 [ 1527.616884] do_user_addr_fault+0x56e/0xc60 [ 1527.617657] exc_page_fault+0xa2/0x1a0 [ 1527.618347] ? asm_exc_page_fault+0x8/0x30 [ 1527.619102] asm_exc_page_fault+0x1e/0x30 [ 1527.619831] RIP: 0033:0x7fb96c91bab5 [ 1527.620513] Code: Unable to access opcode bytes at RIP 0x7fb96c91ba8b. [ 1527.621684] RSP: 002b:00007ffeae7dd840 EFLAGS: 00010202 [ 1527.622719] RAX: 0000000000000000 RBX: 0000000000000274 RCX: 00007fb96c9408e1 [ 1527.623982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1527.625281] RBP: 00007ffeae7dd8cc R08: 0000000000000000 R09: 00007ffeae7f7080 [ 1527.626545] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 1527.627819] R13: 0000000000174a56 R14: 0000000000000013 R15: 00007ffeae7dd930 [ 1527.629240] Mem-Info: [ 1527.629727] active_anon:1521 inactive_anon:66918 isolated_anon:0 [ 1527.629727] active_file:9 inactive_file:153 isolated_file:0 [ 1527.629727] unevictable:0 dirty:2 writeback:0 [ 1527.629727] slab_reclaimable:8446 slab_unreclaimable:66013 [ 1527.629727] mapped:69695 shmem:120 pagetables:3976 bounce:0 [ 1527.629727] free:2468 free_pcp:124 free_cma:0 [ 1527.635277] Node 0 active_anon:6084kB inactive_anon:267672kB active_file:36kB inactive_file:612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278780kB dirty:8kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:7040kB all_unreclaimable? no [ 1527.639368] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.643930] lowmem_reserve[]: 0 1616 1616 1616 [ 1527.644820] Node 0 DMA32 free:3384kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:6084kB inactive_anon:267672kB active_file:328kB inactive_file:560kB unevictable:0kB writepending:8kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:15904kB bounce:0kB free_pcp:100kB local_pcp:100kB free_cma:0kB [ 1527.649853] lowmem_reserve[]: 0 0 0 0 [ 1527.650550] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1527.653046] Node 0 DMA32: 530*4kB (UME) 121*8kB (UM) 34*16kB (UM) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3728kB [ 1527.655421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.656948] 237 total pagecache pages [ 1527.657611] 0 pages in swap cache [ 1527.658239] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.659191] Free swap = 0kB [ 1527.659746] Total swap = 0kB [ 1527.660275] 524158 pages RAM [ 1527.660840] 0 pages HighMem/MovableOnly [ 1527.661530] 105060 pages reserved [ 1527.662157] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=288,uid=0 [ 1527.665550] Out of memory (oom_kill_allocating_task): Killed process 288 (syz-executor.5) total-vm:93280kB, anon-rss:400kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 1527.692792] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1527.694518] CPU: 0 PID: 178 Comm: in:imklog Not tainted 5.10.205 #1 [ 1527.695608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.697057] Call Trace: [ 1527.697514] dump_stack+0x107/0x167 [ 1527.698144] dump_header+0x106/0x655 [ 1527.698794] oom_kill_process.cold+0x10/0x15 [ 1527.699559] out_of_memory+0x1149/0x1440 [ 1527.700275] ? oom_killer_disable+0x280/0x280 [ 1527.701046] ? mutex_trylock+0x237/0x2b0 [ 1527.701749] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1527.702776] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1527.703798] ? lock_acquire+0x177/0x470 [ 1527.704504] ? warn_alloc+0x190/0x190 [ 1527.705186] __alloc_pages_nodemask+0x51d/0x600 [ 1527.705988] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1527.707024] ? find_get_entry+0x2c8/0x740 [ 1527.707748] alloc_pages_current+0x187/0x280 [ 1527.708522] __page_cache_alloc+0x2d2/0x360 [ 1527.709270] pagecache_get_page+0x2c7/0xc80 [ 1527.710018] filemap_fault+0x177d/0x2210 [ 1527.710732] ? read_cache_page_gfp+0x30/0x30 [ 1527.711492] ? replace_page_cache_page+0x1200/0x1200 [ 1527.712340] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1527.713267] ext4_filemap_fault+0x87/0xc0 [ 1527.713951] __do_fault+0x113/0x410 [ 1527.714577] handle_mm_fault+0x1e53/0x3500 [ 1527.715302] ? fsnotify+0xf50/0xf50 [ 1527.715917] ? __pmd_alloc+0x5e0/0x5e0 [ 1527.716619] ? vmacache_find+0x55/0x2a0 [ 1527.717297] ? vmacache_update+0xce/0x140 [ 1527.717990] do_user_addr_fault+0x56e/0xc60 [ 1527.718738] exc_page_fault+0xa2/0x1a0 [ 1527.719387] ? asm_exc_page_fault+0x8/0x30 [ 1527.720110] asm_exc_page_fault+0x1e/0x30 [ 1527.720823] RIP: 0033:0x7fc5e3b1608c [ 1527.721451] Code: Unable to access opcode bytes at RIP 0x7fc5e3b16062. [ 1527.722528] RSP: 002b:00007fc5e30b24d0 EFLAGS: 00010246 [ 1527.723435] RAX: 0000000000001343 RBX: 0000000000000000 RCX: 00007fc5e3b1608c [ 1527.724616] RDX: 0000000000001fa0 RSI: 00007fc5e30b2d00 RDI: 0000000000000005 [ 1527.725829] RBP: 000055e3965934c0 R08: 0000000000000000 R09: 000055e39658fe88 [ 1527.727038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5e30b2d00 [ 1527.728247] R13: 0000000000001fa0 R14: 00007fc5e30b2d00 R15: 00007fc5e30b2d56 [ 1527.729607] Mem-Info: [ 1527.730071] active_anon:1521 inactive_anon:66918 isolated_anon:0 [ 1527.730071] active_file:28 inactive_file:35 isolated_file:0 [ 1527.730071] unevictable:0 dirty:2 writeback:0 [ 1527.730071] slab_reclaimable:8446 slab_unreclaimable:66013 [ 1527.730071] mapped:69653 shmem:120 pagetables:3976 bounce:0 [ 1527.730071] free:2468 free_pcp:0 free_cma:0 [ 1527.735312] Node 0 active_anon:6084kB inactive_anon:267672kB active_file:112kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278612kB dirty:8kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:7040kB all_unreclaimable? no [ 1527.739175] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.743730] lowmem_reserve[]: 0 1616 1616 1616 [ 1527.744528] Node 0 DMA32 free:3384kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:6084kB inactive_anon:267672kB active_file:328kB inactive_file:560kB unevictable:0kB writepending:8kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:15904kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1527.749366] lowmem_reserve[]: 0 0 0 0 [ 1527.750058] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1527.752381] Node 0 DMA32: 431*4kB (UME) 106*8kB (UM) 24*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2956kB [ 1527.754731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.756210] 195 total pagecache pages [ 1527.756916] 0 pages in swap cache [ 1527.757512] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.758399] Free swap = 0kB [ 1527.758933] Total swap = 0kB [ 1527.759437] 524158 pages RAM [ 1527.760000] 0 pages HighMem/MovableOnly [ 1527.760698] 105060 pages reserved [ 1527.761305] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0 [ 1527.764325] Out of memory (oom_kill_allocating_task): Killed process 173 (rsyslogd) total-vm:220876kB, anon-rss:476kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1527.826416] in:imklog: page allocation failure: order:0, mode:0x100cca(GFP_HIGHUSER_MOVABLE), nodemask=(null),cpuset=/,mems_allowed=0 [ 1527.828787] CPU: 0 PID: 178 Comm: in:imklog Not tainted 5.10.205 #1 [ 1527.829807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.831099] Call Trace: [ 1527.831520] dump_stack+0x107/0x167 [ 1527.832101] warn_alloc.cold+0x95/0x18a [ 1527.832756] ? zone_watermark_ok_safe+0x260/0x260 [ 1527.833517] ? queue_oom_reaper+0x86/0x1e0 [ 1527.834229] ? wait_for_completion_io+0x270/0x270 [ 1527.835002] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 1527.835947] ? lock_acquire+0x177/0x470 [ 1527.836588] ? warn_alloc+0x190/0x190 [ 1527.837192] __alloc_pages_nodemask+0x51d/0x600 [ 1527.837921] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1527.838834] ? find_get_entry+0x2c8/0x740 [ 1527.839509] alloc_pages_current+0x187/0x280 [ 1527.840253] __page_cache_alloc+0x2d2/0x360 [ 1527.840974] pagecache_get_page+0x2c7/0xc80 [ 1527.841668] filemap_fault+0x177d/0x2210 [ 1527.842313] ? read_cache_page_gfp+0x30/0x30 [ 1527.843001] ? replace_page_cache_page+0x1200/0x1200 [ 1527.843831] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1527.844692] ext4_filemap_fault+0x87/0xc0 [ 1527.845342] __do_fault+0x113/0x410 [ 1527.845925] handle_mm_fault+0x1e53/0x3500 [ 1527.846599] ? fsnotify+0xf50/0xf50 [ 1527.847178] ? __pmd_alloc+0x5e0/0x5e0 [ 1527.847797] ? vmacache_find+0x55/0x2a0 [ 1527.848439] ? vmacache_update+0xce/0x140 [ 1527.849109] do_user_addr_fault+0x56e/0xc60 [ 1527.849799] exc_page_fault+0xa2/0x1a0 [ 1527.850632] ? asm_exc_page_fault+0x8/0x30 [ 1527.851298] asm_exc_page_fault+0x1e/0x30 [ 1527.851947] RIP: 0033:0x7fc5e3b1608c [ 1527.852548] Code: Unable to access opcode bytes at RIP 0x7fc5e3b16062. [ 1527.853588] RSP: 002b:00007fc5e30b24d0 EFLAGS: 00010246 [ 1527.854419] RAX: 0000000000001343 RBX: 0000000000000000 RCX: 00007fc5e3b1608c [ 1527.855547] RDX: 0000000000001fa0 RSI: 00007fc5e30b2d00 RDI: 0000000000000005 [ 1527.856643] RBP: 000055e3965934c0 R08: 0000000000000000 R09: 000055e39658fe88 [ 1527.857736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5e30b2d00 [ 1527.858832] R13: 0000000000001fa0 R14: 00007fc5e30b2d00 R15: 00007fc5e30b2d56 [ 1527.860097] Mem-Info: [ 1527.860535] active_anon:1521 inactive_anon:66918 isolated_anon:0 [ 1527.860535] active_file:44 inactive_file:53 isolated_file:0 [ 1527.860535] unevictable:0 dirty:2 writeback:0 [ 1527.860535] slab_reclaimable:8446 slab_unreclaimable:65971 [ 1527.860535] mapped:69653 shmem:120 pagetables:3976 bounce:0 [ 1527.860535] free:7436 free_pcp:134 free_cma:0 [ 1527.865698] Node 0 active_anon:6084kB inactive_anon:267672kB active_file:176kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278612kB dirty:8kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:6944kB all_unreclaimable? no [ 1527.869462] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.873465] lowmem_reserve[]: 0 1616 1616 1616 [ 1527.874209] Node 0 DMA32 free:122512kB min:17404kB low:19056kB high:20708kB reserved_highatomic:0KB active_anon:6084kB inactive_anon:267672kB active_file:412kB inactive_file:772kB unevictable:0kB writepending:8kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:15904kB bounce:0kB free_pcp:1844kB local_pcp:348kB free_cma:0kB [ 1527.878635] lowmem_reserve[]: 0 0 0 0 [ 1527.879246] Node 0 DMA: 2*4kB (U) 1*8kB (U) 3*16kB (U) 2*32kB (U) 4*64kB (U) 1*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 7936kB [ 1527.881574] Node 0 DMA32: 2068*4kB (UME) 1355*8kB (UME) 715*16kB (UME) 455*32kB (UME) 278*64kB (UME) 154*128kB (UM) 97*256kB (U) 70*512kB (UE) 25*1024kB (U) 16*2048kB (U) 1*4096kB (U) = 205752kB [ 1527.884413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.885717] 279 total pagecache pages [ 1527.886299] 0 pages in swap cache [ 1527.886862] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.887687] Free swap = 0kB [ 1527.888141] Total swap = 0kB [ 1527.888649] 524158 pages RAM [ 1527.889109] 0 pages HighMem/MovableOnly [ 1527.889722] 105060 pages reserved 23:36:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 7: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000534000/0x3000)=nil, &(0x7f0000696000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3f, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:36:36 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0x0, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.048715] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:36:36 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.093595] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x80000000}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x3e}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000002000000002e2f66696c653000"]) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)="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", 0x1000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_init() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$FIBMAP(r2, 0x1, 0x0) setgid(0x0) 23:36:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x14c6, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1d89, 0x59f7, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000b2f000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x8000000) r2 = memfd_create(&(0x7f0000000040)='\x00\x9ei@\xad\xd3\xb2`\xe8\x88\xc4\xd8D>\n\x8cJo3\x1d\b6\xdd\xda\xacQ\x01\xfe\x8d\xb7\x01Q\xc6/G/\xf9\n', 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4340, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:36:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.268089] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1542.280599] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1542.320385] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1542.320494] ALSA: seq fatal error: cannot create timer (-19) 23:36:36 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x3f, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r1]}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:36:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.425298] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:36:36 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.483049] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1542.494734] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:36:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:36:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:36:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1542.552613] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1542.648167] ALSA: seq fatal error: cannot create timer (-19) [ 1547.273794] Bluetooth: hci3: command 0x0409 tx timeout [ 1549.321698] Bluetooth: hci3: command 0x041b tx timeout [ 1551.369689] Bluetooth: hci3: command 0x040f tx timeout [ 1552.503977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.505806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.509290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1552.555400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.557355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.559885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1553.418163] Bluetooth: hci3: command 0x0419 tx timeout 23:37:02 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:02 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:02 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:02 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:02 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) sendmsg$inet6(r1, &(0x7f0000001800)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000180)="1a3f7b9d82f16db67d6e26bb2bc3a7b7bd3d7a2aba7c6ff6e672f30db75202686dfcfe2b52f3e51717878b0240843b10a2712a255eddd869b126033f8e8eaa0d68ca97f32708fad2a12a3fceab7eeb2803b2", 0x52}, {&(0x7f0000000080)="67b06b1d565d2b42b9e72d0c6a99b094850a508a1ec46230c1a72647", 0x1c}, {&(0x7f0000000200)="e6dc91090b0be42817fdb3a8ee8e8323820b9141d31c3840449a76afac6b1a35ec4ab26262191652d9ba1c6aad0ece2f9f3720876992e2034efd17aa4363e41446f322d6a0362c9eabf7281793c03d2fca1ac16ea590fc9369ad375e8972291fdbd510bbabf8041244dd6e43663165db9edfa29862262170fb88a8da44095fac14cc727894b636d413ed2add8876c3e46f338b8fbf09032404728beff9e62db1db08a16065", 0xa5}, {&(0x7f00000002c0)="c14f12366c90519e68f14c6266fa345bc15e173408982effe901f5fe0246e008e8e1c6d8d108235044c2a25deb3aad429222a21745c5ef21442580c3ed94ca90da548bd9db0358c2109f9da5bcac47c39ab20326fbb7364378bc9fdf0f7a94c5028e05159a85caa3d2321c3e679be960f27c67f0c10f68fd92111d7111f64e3592e80d69ee897739041c28e29ff52007ee15a854b30eb959142e397a84136b9f0de4c09acaba55293b03b7f23266e408a9f6f6fed9ee0a379f3697c0e2f41a073f74822b829c187e4d46a2c5f5839e676904fd848983d2986b8a", 0xda}, {&(0x7f00000003c0)="5c0aa16a79423cbabe62180a965dfeefcc307c2fe2e1d41921e81683e2d1b31f89cabb57cfa766482ed82a32721dc2933e06921f2282a746fb11737671a2b1958f4b6756d9651086d0", 0x49}, {&(0x7f0000000100)="67072508128598496847065227de768add250d767323e2e37a74bd57c1637113b2dbfe32144ff6", 0x27}, {&(0x7f0000000440)="4917562d133f80968418afba", 0xc}, {&(0x7f0000000480)="1a7122fae289365dd4b7679a7cd5493e9fa787c5aa2881aa9ccd656adb78ee9d8acfba580390068ce4be9b51c4fab37e10111c1f9b94a0b4874638fc2062c0d543b4bf4dbe4ddf1f7fc39948769c60b50a085ba05f3c05cc0cc3fd178ffc065c9fe48c5d128d4230786adc1a345fa2b5232f969cd205c8ffa905de0cd67821866eaa9258b272d08c12889e2c60589f822385a09ed3a80b2d6cfe341b6b", 0x9d}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="74472309f979cd51f32bb24a3d523999ac8b8da728a614f127d82ee0a075d364405b3954edd2a1a696929fb5916fdcc5b7ca8c234a20f4919f782f1703be8c1508cf8383c6e0302f995b0990096586cb714941a6fa57049890d72254e702b96c8cb1ed9277ded8a92564fe25c8c7f2d665c5c553ee48db2b0ed278338fc2203872e3570ab30eca2ccafd6000e256d0552e4b5d298f288cbcc61b4eddf39a5ee9a5d5d360f913a47bd11da726d61d48ec4bcccfd3c10b86fa65b74944b93d8118f032f5156a3ef18758addee7a01fab5dabe39506299d8306ef112e", 0xdb}], 0xa, &(0x7f0000001700)=[@rthdrdstopts={{0xe8, 0x29, 0x37, {0x32, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic={0x3, 0xab, "de875a97b3a3667904b1fc69e87745cb2a1cf127b197bc83d04cefd8a40d4fd00bd8372e495e3006fcd4dd44f5615260d10e226ee6a791b4827c81b62c28c1b250215c08d86ba16daa617160380a072244860540f14768415ecfa48e8d14979f8e583b1c8dc994b088d309c2c057bb6ac37928d692117f1d98480bbe2fd41dcabd8b972ca1b230be37ed4d814a5f78cbdd39ad6f6c338ea635ba9b4387734b136c66426a9f71ce72ffdc76"}, @pad1, @enc_lim={0x4, 0x1, 0xc9}]}}}], 0xe8}, 0x840c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setgid(0x0) 23:37:02 executing program 4: r0 = syz_io_uring_setup(0x4686, &(0x7f0000000200)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x200001) perf_event_open(&(0x7f0000000080)={0x0, 0x4c, 0x1, 0x1a, 0x0, 0xa1, 0x0, 0x7fff, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1cf, 0x10001}, 0x4, 0xa, 0x90, 0x2, 0x0, 0x40, 0x8000, 0x0, 0x81, 0x0, 0xb5}, r2, 0xfffffffffffffffe, r1, 0x3) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x5bc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1008003) write$binfmt_elf64(r5, &(0x7f0000000a00)=ANY=[], 0x5bc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x1000003) write$binfmt_elf64(r6, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x11, r6, 0x8000000) fork() 23:37:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1568.220237] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1568.224683] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1568.247962] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1568.309529] ALSA: seq fatal error: cannot create timer (-19) [ 1584.160069] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@local, 0x78, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) dup2(0xffffffffffffffff, r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:37:18 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:18 executing program 6: r0 = syz_io_uring_setup(0xfffffffe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0xc0045878, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000000080), 0x4) fgetxattr(r6, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)=""/86, 0x56) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x81, 0x53d, 0xe10, 0x5, 0x0, {0x2, r7}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:18 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa, 0x0, 0x1, [@generic]}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:18 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:18 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000400000000000000000000020000020000000000000013c54e5f6a525c89c3ab835a850243a1340800f19425043145f5a554733a67be3532b681607509a31e3f7ea2e2bcf9"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) io_uring_enter(r1, 0x2d7d, 0xc2d3, 0x2, &(0x7f00000000c0)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000280)='{-\'%[.,]\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xe0f, 0x2, 0x7, 0x7, 0x0, 0x44b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r2) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "3ff0a55fffdf0f59", "78a1c82416c27bf3be0d14446cb4538e", "59f6eaa9", "5a3e7aad1d42d364"}, 0x28) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r10 = dup2(r3, r0) syz_io_uring_submit(r4, r7, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r10, 0x80, &(0x7f0000000380)=@l2={0x1f, 0x401, @none, 0x80}}, 0xfffffff7) 23:37:18 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1584.194803] device syz_tun entered promiscuous mode [ 1584.198218] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 23:37:18 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1584.221359] device syz_tun left promiscuous mode [ 1584.232071] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1584.240293] device syz_tun entered promiscuous mode [ 1584.249155] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1584.260110] device syz_tun left promiscuous mode 23:37:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x8000000, @private2, 0x100}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x2, 0x3, 0x80, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1584.374288] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000001700), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x5bc) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {r0}}, './file0\x00'}) io_uring_enter(r0, 0x330e, 0x112, 0x2, &(0x7f0000000180)={[0xe6]}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/157, 0x9d}], 0x4, &(0x7f0000001640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x2100) ptrace(0x4207, r9) 23:37:33 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:33 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000000080), 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r4, &(0x7f0000000000)=0x80, &(0x7f0000000240)=@pppol2tp, 0x0, 0x800, 0x1, {0x0, r5}}, 0x80800000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000000080), 0x4) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:33 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:33 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa, 0x0, 0x1, [@generic]}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@local, 0x78, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) dup2(0xffffffffffffffff, r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1599.237392] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1599.247691] device syz_tun entered promiscuous mode 23:37:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x40800, 0x82) ftruncate(r2, 0x5) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x800, 0x4) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) fchown(0xffffffffffffffff, 0x0, r3) setgid(r3) 23:37:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1599.282185] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1599.285387] device syz_tun left promiscuous mode [ 1599.294159] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:33 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 23:37:33 executing program 7: r0 = syz_io_uring_setup(0xfffffffe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0xc0045878, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000000080), 0x4) fgetxattr(r6, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)=""/86, 0x56) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x81, 0x53d, 0xe10, 0x5, 0x0, {0x2, r7}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x274, 0x10, 0x3, 0x201, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x4}, [@generic='M}', @generic="349ecb0420e49e808364ec29ab19a7e4e14ff74878e36bb8aca1e69903dd9ddbaabc104768bcb9a3f7b3ddc3fddfbc32143c2cbadfb418939d238d238a6bf3687b2b52e03d4d82a6d07ddf80fd1408a2279fb08f3425dc338bc17800ac", @typed={0x8, 0x48, 0x0, 0x0, @uid=r1}, @nested={0x177, 0x23, 0x0, 0x1, [@generic="7616fd93ee00186535546c71a86944c01723f0ca490088508d859bbd9d5cd1864108dda962b53356ec527fed3cac897b29c1cf57f42b5b398defeb7304ae71e2de9df755b7e29ab9bcce230caaa15148b6ff423a6bdadbf3e3f1afe925a5197cc56eaa6af38114f2a34db12a7adf49b7ba8c379ff0e5cc4b1ed47fbeb49fc0efbfd433e6f291ea40d3af616f23883db920357747ca9d5323733fb48ff6b25e499353c40e4e1cd0", @generic="b26ace2c7a45b59212a46181e50400f2531546c43315642ee0fbecf9aef474881afec1dce1c8ad938064f88d10b220671f23e6e25da6d91ffd7e9c07fcae798510c8f0a8aecf7e81bc2ec73c915c8f455464d95d6d781ab58d94d3dc733ff491fbe5be2129f34884b8", @generic="de31c512094ecc2abf8dc67e4ece33297c45d6d88d057c3b1e66b266f4c0bb6a8e3af1afd1221684dcc24755701390a6f03ec06b28318f36ab27a052e650ca95af7bca984144bdb3c882a828d7c3f7f08400873271c6bdfdb548ecaf1d3bff919c6980"]}, @generic="3af21d3fbba34236ccabe93c96db381bbaeab932d8ba50f8843475c39f5b65fe74a82275e3abf90276a5c7393c76084a1ed48f1af3d8c6a9137c791416683672eed992c7844b3f150f4dc92db5c29a3d3d7c2c01a79118038529e7941d4c3ff9b126e1314c691971ae33a4cb0b4d92fc058abb6ff5c615eb67672627f761f386"]}, 0x274}, 0x1, 0x0, 0x0, 0x40800}, 0x4040890) setgid(0x0) 23:37:33 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 1599.414907] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:33 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa, 0x0, 0x1, [@generic]}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:33 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 1599.533466] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:33 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1599.620583] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1599.626883] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:49 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() fork() 23:37:49 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:49 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 23:37:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 1615.721894] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1615.767010] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:49 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0xc0045878, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x8, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10102, 0x1, {0x0, r6}}, 0x80000000) syz_io_uring_setup(0x2887, &(0x7f0000000080)={0x0, 0x598b, 0x2, 0x1, 0x36d, 0x0, r0}, &(0x7f00005cb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) io_uring_setup(0x1fe7, &(0x7f0000000380)={0x0, 0x2d98, 0x0, 0x1, 0x113}) fork() 23:37:49 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x5, 0x7, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000280)={{}, "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"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000015c0)=ANY=[@ANYBLOB="01000000010695e844000000e4c81c72a55250f44be970266b56fc220dec11e8c86d7623ea592667ebb5f9123f8a922d37dd3b632e1a0d7678a9110d1b0890455aa5ac8557487b6cbfc83098843d2d13be56bd437825f926e88faab5171e5f12e6194188", @ANYRES32=r2, @ANYBLOB="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"]) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3) creat(&(0x7f0000000180)='./file0\x00', 0x115) readahead(r0, 0xfffffffffffff045, 0x5a) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="97000008003a00200000a2130005003300010000000a000cfbbb2a2c911f1abf93afee96b9a1c49900aaaaaaaaaa11000000000000335e61334740cb605810d981b0e6643390674f"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x380, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 23:37:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d63cef42816e163, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x5) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0, 0xfffffffffffffe46, 0xfffffffffffffffc}]) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x557, 0x0, &(0x7f0000000380), 0x1080010, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYRESDEC=0xee00, @ANYBLOB="2cef623c", @ANYRESDEC=0xee01, @ANYBLOB="17646566636f6e36b3746578743d73827374656d5f752c7375626a5f757365723d00000000000000c9c10a2aa6548ce4be829f9ca188077d13c2833fa427c618b67a21807a103b9086439ac7fda1d5c884d59595e99355654df3e91c449f87e55c5748150a5863b1ee", @ANYRESDEC=0xee00, @ANYBLOB="638675b8699d683a617547e1b8956f9c22f9eded3cf0e859fede07a0632d84a0cd9d84596d818020d6c41ff93eb5ac52b957b822"]) io_cancel(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x401, r4, &(0x7f0000000500)="45261f3884f1bde0af7e25ba9eac873207e033e23acd99e033b4cc803ed95762386dd0881c470b8a27735d5206fb0edcc38c304ace2e35b90387ea4513a9e211b3cdc3fdf11a98ceb015c1f7a1e35e56dbb6532ea127b84d2af9fb59c1dd138fe4d4e324ab2f0027dc431122ca9e0e5bbb5f712d2d8e09c29f6b586ef3675e1a16e8af2163b635802c5664be9460f93156251a24cf0175c31264cbff3867ca371b498a73a8d16cac8a8d2d3260ed9e9ca34e37ce74f509b1796dd1d73522cca10abd1b703967bb0e31f2a2c1e2264643e19694cfa4e3db8169d2bda02b64210183396144d66cb334e9ce07477bae", 0xee, 0x6, 0x0, 0x0, r1}, &(0x7f0000000640)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000080), 0x4) dup3(r0, r5, 0x80000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d}) setgid(0x0) 23:37:49 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 1615.782378] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1615.833176] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:50 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 23:37:50 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 23:37:50 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1615.963721] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1615.988939] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:50 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:37:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="280047d29ec5a2060000000000020000000000000020bdeeaf8b8b1446bc79ab324873ef429ec9e34248fedf4ba38f54b45ed4ec9717fb75335d592d6a52b32b46690e35dcca407d84efd30518000000001a32bc7e7b144e8ab4d01c8b0499a3876ccd1aa7ef2f68551e9afd5717edd1ae7091abbd63fb6a52fc6159469cd9b47f59bbfad7ed0d4422d2073d266807528b2904f8f82c259f9e77d93792355a2c952fe69f3ada9337aed68037939dceb786e4202dc694e3b383363103665a76ae62283c7928f35bab7d4eff5b0ea318a0d21921c22a727feb6a23724adf0394b7a13ea3bb908930a0d98e316a250582b6ae079f99ee4021088261b95bdda77000000000a467de95e3438957e6538cf09cb1ae34155522d739d6547b37263570c26bdfe023e0f70c048bf51f63e131f9263c4a3888152c333b81b4943eca9a52b3cb860cd17204a8efde30bf19b2582cc0b2a99e12e301c62870de575e091b3613fa9a4073965b172b530985abb66ed2156095bf1b88f74f03c102d33347ac1976857a1f1088700efb49650ebb4f7c929b67b0b4d32158be09de040f459629980e1f04fbb16f1d191001cc08ed684c5cc21bb9f7", @ANYRES32=0x0, @ANYBLOB="1c0011e1cc00000000000000"], 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xfffffffffffffffd, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) 23:37:50 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1616.066898] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:50 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1616.093767] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:37:50 executing program 6: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x6, 'gretap0\x00', {0x101}, 0x8000}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:37:50 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1616.117683] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 23:37:50 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 23:37:50 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1616.159009] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:37:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:37:50 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r2, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="0197000001000002180000f3", @ANYRES32=r1, @ANYBLOB="00010000000000002e2f66696c6530004f3373c2f9c62dd629892577ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e286d7095f4f90732ad48aa233aaf89ea32f02a30401f531157cc5ffecf7fc1b4a372d22078bef8fefcbb14660773fe7b19c2ef94fdc22b07d40e3e40034fa8732658a9c0883954197bf9fb5f5cb7eb6072e08cf25636cd0a2c3aa63bc7258a957f691875d7377731fba66eb075db1fc309b05dedd75821a6bf946dc0372eb1ff16d7dfdcbcea3df068f6433cfcc8939e64a3a4d71cdac2bec7f5bf3ed545a6cbf0913960a6bc20d340e2487f8b4b820e756ed0f9b5abb531dd2b39440765"]) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x6, 0x1a79, 0x80000000, 0x401, 0x4, 0x7}) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x81, 0x0, 0x20, 0x9, 0x0, 0x100000001, 0x49ce, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b582f0790511517, @perf_bp={&(0x7f0000000000), 0x6}, 0x12002, 0x0, 0x9, 0x8, 0x1f, 0x3, 0x2, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x6, r3, 0x1) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 23:37:50 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:05 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20083, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x00'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x61, 0x30, 0x39, 0x36, 0x30, 0x32], 0x2d, [0x36, 0x39, 0x63, 0x64], 0x2d, [0x30, 0x32, 0x62, 0x38], 0x2d, [0x39, 0x30, 0x33], 0x2d, [0x32, 0x33, 0x30, 0x30, 0x35, 0x39, 0x66, 0x33]}}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@seclabel}]}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:38:05 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x6, 0xa, 0x0, 0x1, [@generic='\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:05 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 1) 23:38:05 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 1) 23:38:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000480)="0c8fd68ad9906cd5439001fb3ef9c4c72c1c8cf932fcd1387ec0af959626c18e842ef5527f887aa7d9f46a017f35549d8ca5e1e33563cda30fd8a056f50bd075b4968416df69de21e8bfe40395d0610147942a4e41447c548f5c322cc8889605ea58a9c6c489d96d93b44753bf748c865e3f6b5a10a8457bdaed95d3f409249954b337e9990f9a86d581eb46de0ac8563d10db4d018f90b286cccc180d548e0d4988fd97465963b0cf3937d9cbf65f55bd151e3ad91f7c5b6e1d3c259ccbe6972aa01f7b7ffc2c970186740d77291ff960fc223c599d760bcce99c3fe3ac17146d523f0122f69b255fa234e7f57713d16bec7beae10dae6f4008c39546eb7db5abaf71369e025366f553b3e536a4", 0x10e) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) r5 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x8, 0x10, 0x0, 0x162, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f0000000140)) unlinkat(r5, &(0x7f00000000c0)='./file0\x00', 0x200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000180)=[{r2, 0x8100}, {r5, 0x4}, {r6, 0x20}, {r3, 0x2000}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x9]}, 0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 23:38:05 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:05 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00001a8000/0x2000)=nil, 0x2000, 0x9, 0x810, r0, 0x8000000) fork() [ 1631.602305] validate_nla: 1 callbacks suppressed [ 1631.602342] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1631.613350] FAULT_INJECTION: forcing a failure. [ 1631.613350] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.615128] CPU: 1 PID: 22351 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1631.615929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.616860] Call Trace: [ 1631.617169] dump_stack+0x107/0x167 [ 1631.617599] should_fail.cold+0x5/0xa [ 1631.618046] ? alloc_pipe_info+0x10a/0x590 [ 1631.618528] should_failslab+0x5/0x20 [ 1631.618971] kmem_cache_alloc_trace+0x55/0x320 [ 1631.619508] alloc_pipe_info+0x10a/0x590 [ 1631.619972] splice_direct_to_actor+0x774/0x980 [ 1631.620518] ? _cond_resched+0x12/0x80 [ 1631.620982] ? pipe_to_sendpage+0x380/0x380 [ 1631.621080] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1631.621492] ? selinux_file_permission+0x92/0x520 [ 1631.623599] ? do_splice_to+0x160/0x160 [ 1631.624068] ? security_file_permission+0x24e/0x570 [ 1631.624696] do_splice_direct+0x1c4/0x290 [ 1631.625244] ? splice_direct_to_actor+0x980/0x980 [ 1631.625882] ? selinux_file_permission+0x92/0x520 [ 1631.626501] ? security_file_permission+0x24e/0x570 [ 1631.627159] vfs_copy_file_range+0x4f8/0x1290 [ 1631.627737] ? generic_file_rw_checks+0x240/0x240 [ 1631.628345] ? __fget_files+0x296/0x4c0 [ 1631.628853] __do_sys_copy_file_range+0x193/0x420 [ 1631.629468] ? vfs_copy_file_range+0x1290/0x1290 [ 1631.630091] ? ksys_write+0x1a9/0x260 [ 1631.630544] ? __ia32_sys_read+0xb0/0xb0 [ 1631.631077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.631769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.632455] do_syscall_64+0x33/0x40 [ 1631.632942] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1631.633602] RIP: 0033:0x7f0aae61ab19 [ 1631.634053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.636436] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1631.637387] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1631.638284] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1631.639093] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1631.639967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.640845] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1631.656495] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1631.664897] FAULT_INJECTION: forcing a failure. [ 1631.664897] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.666367] CPU: 1 PID: 22353 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1631.667149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.668068] Call Trace: [ 1631.668369] dump_stack+0x107/0x167 [ 1631.668806] should_fail.cold+0x5/0xa [ 1631.669251] ? alloc_pipe_info+0x10a/0x590 [ 1631.669766] should_failslab+0x5/0x20 [ 1631.670215] kmem_cache_alloc_trace+0x55/0x320 [ 1631.670766] alloc_pipe_info+0x10a/0x590 [ 1631.671250] splice_direct_to_actor+0x774/0x980 [ 1631.671799] ? _cond_resched+0x12/0x80 [ 1631.672253] ? pipe_to_sendpage+0x380/0x380 [ 1631.672760] ? selinux_file_permission+0x92/0x520 [ 1631.673322] ? do_splice_to+0x160/0x160 [ 1631.673826] ? security_file_permission+0x24e/0x570 [ 1631.674450] do_splice_direct+0x1c4/0x290 [ 1631.674740] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1631.674970] ? splice_direct_to_actor+0x980/0x980 [ 1631.677176] ? selinux_file_permission+0x92/0x520 [ 1631.677802] ? security_file_permission+0x24e/0x570 [ 1631.678433] vfs_copy_file_range+0x4f8/0x1290 [ 1631.679000] ? generic_file_rw_checks+0x240/0x240 [ 1631.679596] ? __fget_files+0x296/0x4c0 [ 1631.680110] __do_sys_copy_file_range+0x193/0x420 [ 1631.680710] ? vfs_copy_file_range+0x1290/0x1290 [ 1631.681287] ? ksys_write+0x1a9/0x260 [ 1631.681775] ? __ia32_sys_read+0xb0/0xb0 [ 1631.682284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.682975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.683638] do_syscall_64+0x33/0x40 [ 1631.684121] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1631.684789] RIP: 0033:0x7fcbfd904b19 [ 1631.685279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.687662] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1631.688534] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1631.689422] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1631.690342] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1631.691145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.692050] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:38:05 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:05 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 2) 23:38:05 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:05 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 2) [ 1631.866197] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:38:06 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1631.878148] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1631.883257] FAULT_INJECTION: forcing a failure. [ 1631.883257] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.884852] CPU: 1 PID: 22499 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1631.885644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.886544] Call Trace: [ 1631.886847] dump_stack+0x107/0x167 [ 1631.887255] should_fail.cold+0x5/0xa [ 1631.887673] ? create_object.isra.0+0x3a/0xa20 [ 1631.888187] should_failslab+0x5/0x20 [ 1631.888616] kmem_cache_alloc+0x5b/0x310 [ 1631.889058] create_object.isra.0+0x3a/0xa20 [ 1631.889550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1631.890102] kmem_cache_alloc_trace+0x151/0x320 [ 1631.890627] alloc_pipe_info+0x10a/0x590 [ 1631.891086] splice_direct_to_actor+0x774/0x980 [ 1631.891624] ? _cond_resched+0x12/0x80 [ 1631.892044] ? pipe_to_sendpage+0x380/0x380 [ 1631.892529] ? selinux_file_permission+0x92/0x520 [ 1631.893052] ? do_splice_to+0x160/0x160 [ 1631.893510] ? security_file_permission+0x24e/0x570 [ 1631.894076] do_splice_direct+0x1c4/0x290 [ 1631.894539] ? splice_direct_to_actor+0x980/0x980 [ 1631.895075] ? selinux_file_permission+0x92/0x520 [ 1631.895629] ? security_file_permission+0x24e/0x570 [ 1631.896210] vfs_copy_file_range+0x4f8/0x1290 [ 1631.896727] ? generic_file_rw_checks+0x240/0x240 [ 1631.897271] ? __fget_files+0x296/0x4c0 [ 1631.897749] __do_sys_copy_file_range+0x193/0x420 [ 1631.898296] ? vfs_copy_file_range+0x1290/0x1290 [ 1631.898827] ? ksys_write+0x1a9/0x260 [ 1631.899265] ? __ia32_sys_read+0xb0/0xb0 [ 1631.899734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.900321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.900917] do_syscall_64+0x33/0x40 [ 1631.901330] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1631.901916] RIP: 0033:0x7fcbfd904b19 [ 1631.902337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.904393] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1631.905238] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1631.906136] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1631.906999] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1631.907898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.908774] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1631.916965] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1631.933167] FAULT_INJECTION: forcing a failure. [ 1631.933167] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.934497] CPU: 1 PID: 22607 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1631.935258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.936132] Call Trace: [ 1631.936412] dump_stack+0x107/0x167 [ 1631.936810] should_fail.cold+0x5/0xa [ 1631.937227] ? create_object.isra.0+0x3a/0xa20 [ 1631.937721] should_failslab+0x5/0x20 [ 1631.938136] kmem_cache_alloc+0x5b/0x310 [ 1631.938583] create_object.isra.0+0x3a/0xa20 [ 1631.939059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1631.939608] kmem_cache_alloc_trace+0x151/0x320 [ 1631.940120] alloc_pipe_info+0x10a/0x590 [ 1631.940573] splice_direct_to_actor+0x774/0x980 [ 1631.941068] ? _cond_resched+0x12/0x80 [ 1631.941489] ? pipe_to_sendpage+0x380/0x380 [ 1631.941958] ? selinux_file_permission+0x92/0x520 [ 1631.942501] ? do_splice_to+0x160/0x160 [ 1631.942953] ? security_file_permission+0x24e/0x570 [ 1631.943488] do_splice_direct+0x1c4/0x290 [ 1631.943962] ? splice_direct_to_actor+0x980/0x980 [ 1631.944503] ? selinux_file_permission+0x92/0x520 [ 1631.945054] ? security_file_permission+0x24e/0x570 [ 1631.945633] vfs_copy_file_range+0x4f8/0x1290 [ 1631.946172] ? generic_file_rw_checks+0x240/0x240 [ 1631.946720] ? __fget_files+0x296/0x4c0 [ 1631.947181] __do_sys_copy_file_range+0x193/0x420 [ 1631.947732] ? vfs_copy_file_range+0x1290/0x1290 [ 1631.948270] ? ksys_write+0x1a9/0x260 [ 1631.948696] ? __ia32_sys_read+0xb0/0xb0 [ 1631.949166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.949779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.950367] do_syscall_64+0x33/0x40 [ 1631.950790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1631.951371] RIP: 0033:0x7f0aae61ab19 [ 1631.951802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.953909] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1631.954773] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1631.955537] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1631.956342] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1631.957152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.957973] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:38:06 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:38:20 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:20 executing program 7: mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)={'trans=unix,', {[{@privport}, {@access_client}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}]}}) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x61) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendto$unix(r2, &(0x7f0000000ac0)="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", 0x1000, 0x4001, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000500), 0x110000, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) dup3(r3, 0xffffffffffffffff, 0x80000) fchown(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 23:38:20 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x195) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:38:20 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:20 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 3) 23:38:20 executing program 5: syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000003ec0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x1, 0x1, &(0x7f0000002380)="40e98236d834add876c36e8e7521a22a559d5ae1a43a5ee8a79c4a71b530b20afa0d3ca4244515ae85a290eec181668b2def12dfc51c473cac026c3defdf5fe2e05f9898dbeaaf64d31f846953a42cafee01b6a4c0e55a7f7435338e3b9a8f886cbb", 0x8, 0x0, 0x0, {0x3}}, 0x7ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x20}}, './file0\x00'}) [ 1646.015456] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1646.018130] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1646.026414] FAULT_INJECTION: forcing a failure. [ 1646.026414] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.027991] CPU: 0 PID: 22784 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1646.028777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.029698] Call Trace: [ 1646.030012] dump_stack+0x107/0x167 [ 1646.030423] should_fail.cold+0x5/0xa [ 1646.030867] ? alloc_pipe_info+0x1e5/0x590 [ 1646.031344] should_failslab+0x5/0x20 [ 1646.031778] __kmalloc+0x72/0x390 [ 1646.032164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.032733] alloc_pipe_info+0x1e5/0x590 [ 1646.033191] splice_direct_to_actor+0x774/0x980 [ 1646.033723] ? _cond_resched+0x12/0x80 [ 1646.034181] ? pipe_to_sendpage+0x380/0x380 [ 1646.034659] ? selinux_file_permission+0x92/0x520 [ 1646.035197] ? do_splice_to+0x160/0x160 [ 1646.035651] ? security_file_permission+0x24e/0x570 [ 1646.036213] do_splice_direct+0x1c4/0x290 [ 1646.036679] ? splice_direct_to_actor+0x980/0x980 [ 1646.037242] ? selinux_file_permission+0x92/0x520 [ 1646.037813] ? security_file_permission+0x24e/0x570 [ 1646.038430] vfs_copy_file_range+0x4f8/0x1290 [ 1646.038962] ? generic_file_rw_checks+0x240/0x240 [ 1646.039497] ? __fget_files+0x296/0x4c0 [ 1646.039984] __do_sys_copy_file_range+0x193/0x420 [ 1646.040531] ? vfs_copy_file_range+0x1290/0x1290 [ 1646.041093] ? ksys_write+0x1a9/0x260 [ 1646.041516] ? __ia32_sys_read+0xb0/0xb0 [ 1646.042013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.042593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.043206] do_syscall_64+0x33/0x40 [ 1646.043631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1646.044233] RIP: 0033:0x7f0aae61ab19 [ 1646.044650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.046801] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1646.047633] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1646.048472] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1646.049313] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1646.050163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.050998] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1646.059188] FAULT_INJECTION: forcing a failure. [ 1646.059188] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.059352] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1646.060856] CPU: 0 PID: 22782 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1646.062806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.063728] Call Trace: [ 1646.064020] dump_stack+0x107/0x167 [ 1646.064438] should_fail.cold+0x5/0xa [ 1646.064870] ? alloc_pipe_info+0x1e5/0x590 [ 1646.065349] should_failslab+0x5/0x20 [ 1646.065765] __kmalloc+0x72/0x390 [ 1646.066167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.066724] alloc_pipe_info+0x1e5/0x590 [ 1646.067171] splice_direct_to_actor+0x774/0x980 [ 1646.067686] ? _cond_resched+0x12/0x80 [ 1646.068142] ? pipe_to_sendpage+0x380/0x380 [ 1646.068617] ? selinux_file_permission+0x92/0x520 [ 1646.069175] ? do_splice_to+0x160/0x160 [ 1646.069613] ? security_file_permission+0x24e/0x570 [ 1646.070197] do_splice_direct+0x1c4/0x290 [ 1646.070656] ? splice_direct_to_actor+0x980/0x980 [ 1646.071204] ? selinux_file_permission+0x92/0x520 [ 1646.071751] ? security_file_permission+0x24e/0x570 [ 1646.072329] vfs_copy_file_range+0x4f8/0x1290 [ 1646.072862] ? generic_file_rw_checks+0x240/0x240 [ 1646.073432] ? __fget_files+0x296/0x4c0 [ 1646.073917] __do_sys_copy_file_range+0x193/0x420 [ 1646.074472] ? vfs_copy_file_range+0x1290/0x1290 [ 1646.075023] ? ksys_write+0x1a9/0x260 [ 1646.075466] ? __ia32_sys_read+0xb0/0xb0 [ 1646.075945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.076540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.077141] do_syscall_64+0x33/0x40 [ 1646.077582] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1646.078189] RIP: 0033:0x7fcbfd904b19 [ 1646.078617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.080710] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1646.081599] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1646.082428] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1646.083247] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1646.084072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.084915] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 sendmmsg$inet6(r5, &(0x7f0000005dc0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8000, @remote, 0x1ff}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="66aeb08b533ea724152554722b1355d4deb6bf3d2b090b597293b583cea24ff6d295f5a8462360f5874e3dd95d3211e8eb5fab8e2dfc30f219dea233823ef905673958a5a9eec0eb5326675de29a5d94db1a44fe723b24d34be7ae40f384d3b5939896d1f4a255be4b86810ac48522236441b49c529fbd7db65bd7a9de658a8ba9876601adb4a03a1b68133b0a58bbc9953d16adfce531a0a4814f5a53707fbdd8de4be749973f0c2d8dca74c91db6c05deed9ede3640bf0c987cfc501d1bfad647357837c7ed6d4ccede47dfa066bf736c6decb36813a801b2ec851e3b921727fe4ceb0d927cf3786ef98e0d5deeebda774f477115ab4d4d3d112d1e9b4c408e9e8f619149206d97b203fe627ffddfc139c396fa2015cdd13a9e8d085908a5391d156409d6d7fbefd0e04551e4af6b8d8dd5bb08046a88928474c15258ae8313107dcfe9927a9196de9b4dbbe99a988429f5d2b79c0fb5c203153ea91c68839a9e601c766c07675d58de4bf51b415b12646d5b659e841f99bd295b315f769a530faad822e259342d18fb89bb861d16c7028effbb856974d38e6979d364374d49b368963fe185a7597bb11929bfe71afdce97c9935089c42a42dcbbeb0c88f090675a8757a8eade83e837079539b45f357da3ace2bd9485b09fc165ae0b7929df528ee09bb15277bd2df740d200b9703644a411a410b12e0afc110f476aa293b0116b887c724ab1e4d3a16f13393592651a752c625d4e7b1199bb76be71588f9f18f04991e7b27ccf48415a554fdfa656ad815df6b3ace5a573ccc5773f02f6048e52094496c62feb375801f703d791b47fe075035adc1ebf592fb897bb5281036f22ab16a20e5118175a47ffee69b67ef68242dd07119e8088a11b261a0aae7471cee1bd9b9dec847d8abf3e626e05504db89da7e5e18ac2074c33bd9b26738a6c8ce98ea7941ea73a0437a3894d750eedf35fb9f23eba55d46fb05176fb3054773bb713c8bc7e8c826388f43d2ecf44bba12fa14380c6343162d4fdede27ef7bbddce882cc1364c41c3720b39c8127db0cd5ebefedb5ccfd2139c87d9fc96fe1af328bb180173f6e7a35d9122c6b872ada049cecd21474a51d0017c3f241bd9aa92acf44fca8b39ffe18b171530dbec0cf5b3b1a58fc43fabdd5f85e766f794a3889ef063a715549ef1ca13562add7d43d5d31effd4036d0c5466ad3354662043e171be33c863c0b3478228958b13cac6f61ccb3c7fef9bb6a452a0f883a2c3845a9c19a503017f70de02ffd585983c4a2cd6f618243061093eed17dcf58115ce0da220228788596d54f81d5833aa9d704f44759e5d5621cc78ad440c1cd8136f0a79cbc1698c13242054dba2c20da4c1d29145a7d8462ba5eda4e87ad771ceef83c4020a77adef3fcb1e6b0af4b97186ab9943f19194c4a5bba6e6428701c5e6470d40449634d880fb4d5c6ef4ea5595e4967944ec3bc6d3938e5a1a23671fcd24f7f2b99ba53f8169654b309e69898d57756a98d57b2afb558f96904f103e7afd9165042d4ce226fcbf503f679d3c48c53cbfb191b211659e4934c5e9daeed8dc424569a1b8e70e6b779fe2d5b970a57043defcbeda0d8c39f60381251a2cbb1098048db94f37dd00f9a270aeea4054e2414fb69aa8854c464531f2cb8a269e53616dbc481f67b90b35f0ff6ea9f0f63310fcfc3146d17925fca36fe93719c01b65f683ff757d7c14689bbdb28bcea5a1d770ed6ffa14c44f467ee641368f63a3802ce3846cb3b6651c07567027bf877d3bb9f38549b52b6378b9818e7f260e603a30d81048cec8ed5f3023b785ffc946010f8f0eec0938415cc4479f5961914cf85f25c368be3a5c97cb78d96812c0ecc63b738fdfe6a25657433daf8615674bdf922bcf21ccfe7d50c95ea2ccc0fbc9ac804060fd2f05b374894cd655b83f618054c1359899b4b33f7bfb7e5c788f12ab0f66b0fc1ab71fe7a6c3feaf54135264939987e8c9ef07411b346d0127227ed24d9441e8eb153c96e11968338dd8f3e2b4f6cbef37771659ab5cd048ddfc61725131cfa51bcc2fb87945559efde277e154c560020a290b5e822e83a40e1fece69266738b2c11deb5611f6086102931cb8c83eedf6ae2c73f2bf47e8d80ac3a99a84113e565f2a37cf8fcd785e5bd29ad5e417bdea71a2370d0ed3c2bff7542e5c89e3e32054776216b4cfbdae50a3311c2690b1200299d1cff9645341b34229290277bff1e9bdf450292faa8479684eed0a3116f0fb1c0b16247f7111cc1008fc123c093d778a553a3406068a3180919f11675397e1a530fd38e372beb9cc5dac540fcfc6c3d431d599f529e299d870554ab1bf07d841c5b18452d883cbb88bcfd7914b2e42f7eade15a449b8c24b3d3e66ae1340fd7c48cd648a6947c4315a39446b8dd44d5c04b1f9537bf11ba4ea6dc02faa6b37733cf9b4efed6446e3646ee039f6d8e441f0eefa748a06f2ea7f1745bb5ab683d1b81260ff9a0eb027a8172272c642bb137f931f78ea51bd41d9855f0507b9e7128946c57a6d88c18de26a99f985d47dd06d6e0ba2445ec1adb3979c803abbe19a001ef2dc8ca7096e1b3ff22532fe65f700bf340dcc4a7bec45f7624842fa573b7d69b72caba2fc4d24ed255ecd69a633a7a42e0c71d1f8cfb3167d17c9f5cb4d7d5776ac66031f9190898fff27e71bf77174772d798cd3895150098a9bb36c8c50e9632f7755f0663c278d47b0292c3db6f98b7db32ef788b2ae8cc9ad1b1517037fc8417159755c1342447680039b34c5dd9acae6ed3ddc37a74c9df529208053c469de1a04e34555e1d9cff156dc36eea8399fe52e996c2c9e065ec695c95853a434cb87fd2ddf0e595c63490c094c3fc9a8e438789eee53f884e0653eb320ad35602305c918d467eca15957c37ce29a1d9b1f694bb03fa22ec0991a276432b98f5645e2265d9017dafed433fbd9ccf11114fb3d8e3b2527e37ee01ce02ad8e9c0071ce5d70d2586c909a09fa2258f0a0d36308a067596220905e2493e0bde40b677f0cb6926272c3df961371d6c2e633227335bb7a650aeb61a41202a81ecc66bd9cb6f2ccefdb354c7c87c857060dc7a180db4f1be3f534659a437ab453854da78fd8e803eff85c4eb950625a66b523886cfcca2d906fc24a9980d62a9cc32fec10d89a0ba9b898bb61c64b8fd5155edba92c1b4dd549b9f9298d7c997a2e772fa1122b0e6253c042f528d088cb33768497e8349486b1d75076fa34789521aa454122cfcaaf927976411b5b29bb8d2a688dc15216e0242271c4cc58e37b8dc4e0d8884af2e15ae8268b672fe685520b304e14cd410dca75c95598ab6cc91de5111af09edb5e33d49554522d7f3aa6c0938f16da318e6aae6cf105a86b5aed5d087a4b94b945700bb028ab6c70f784d4c58bc4f8c16dabec8bd331c19b86c4c560eb3da6525c290a1db4c3f852181acfa78a615eb1813f5159d0ac3d3c0eec994a6c3afb13ee32d78a5270ddedfeddc82e6e9cf874ff21603dbb48bd27224c3c8e5edd2ec3369908b24d17f28591b41aa2c3a995d290beb931652cfd0454e3bb91d31e7b21b197c28e743c204064d9b73f0ae40193998d4c9cddd6da3209033ffaabad7f9a65bad62eb88733f7c4f2fb56f3aff6ad9e1a07335593ad533ef7c3c85a3e0f866c3e31bf70da2a2c5266116edf2b71d1c5bb3b4e12e4c3b57bcf9557f8bde79b41f3503bfdf6693030c5a87364927a8db08dcc12abb84d6f8a0e0cc2c3ebb85787fd34c4026d4d6684fcc71eff0f0698b3686c1551db11bf9c808a3913be2ac1c2eb4bd9df12ff5e6a97e60514c41158b4da60e81f82d695e0b42b3165e7e22109fddfeb63cace862cafb00c531ca244760ec335bef6519bd1fa45473b153f6ae7c2f0f6413d1f700d656eafb41a4793ce220aacc44fb011520861b759b67675add60b35b92d7403121c954c6d122a6f26e5fd5cd1eef083c5b2813717e2e7f19be5dbf5fd402140e72c9bacf775cb1ffa28057faf9eb1c0caf4df1c2f8dbb905636d56909a12382789dc36ce4657bd4d016376b4ced63a44ac995b2810a39d43595fe2076e37d8ee8e2542d303d426e5d2953d736327efe61eb0af996346d1a103a040d3e06e1f8ecb4768a9425f2988bba7f09805b50c8f459dd9fa749f1e7e39b9ee78c71b1a701a7b0d85de0ff389c48a4a1728a8fb87c5fb90105a3af7f9c997fc54a4cf2014ca147aa484029709bb85ac0e10c26297389a82a57e7d5f7c481cefbd12b674920a6bfd10c33e6ad06d45ed43812d8a644c2c649ed6a6ca3ccd83fbf60bc91d82c11affc28b867f7b4ff3fdbd1e66982ffbb66f18768260891fe705fddbfdcef619dd0efd40057e722fc13973eaa67538d23aaea7a264901a8f2da4287a2145374e59792b5c5605c5f1f783a85f6b57866342f968b6f872d7c92a4aba77d2dd88e02089096829dc3617222dbf75125769228ed0fcabfc7a82923481c6e6a3a33e15d320ea98cd20b34177d6990eb6a20f0b07cc0c8a3bc6ed6cd79ffd3aa77a32f05b8bccb191bc7a31ee9a1dc40272d66970fb986357c312bfc74a2a7ebbac07e24c31da370315ffd68ac1b7d87bc8c1f49741b95f0a7a17dd07c5d3e3e72bb164a98a7395e70995020a710c6f2daf3d9baefd38f3705b98852be3df72771433e3ad7eb0dfeb3217e2db05f323752728c574315d40ae971f584ea93a6a07c9622afc7ba1e29bcac1755342f463f4baed9a6d51c05037b4faa23f264d45e2a74c8ebc36ef4b1ca1733b3af9e8247b3765be69ce1492c4b1e226a5521680a09c794fb709cb8a5ceae1369ff869a9800f38b0f3910837e8439a94d68102c28920ca32dc5d47595dfc1d02ea2f7ab103af538c079619c552d38420970770ac46dd2beb42d612644888c850e38c6dd475ec27cc4c839c704fd415d914f609549df100fbac44fe6d8a3d96a8fd3aae516ea2cbb891e5942109a4199f165da126f80a93085d408318899336becd9fcb89f076704f3ea4fe13b366424ff1823828899ecab9a833db48e6f91f23d0420b876dfed92e73bdd9ebd6e5fbafde2fa9c34489f23c3f19b55fd7b752a5055cbafdcc9e01fdada1f91e421713dd651054aad887c459987e14feba0721409082a77acf46f378f25a0c9615586ef6363005b241fef97fbd2b5a9b123f00d52362717c18cf972fbfcf7f4debe60ac93c9cd36777762816bff1d20eb55b735ccd4a6ba937c1f204e18300acea778c4aa612aa9cf63afdac0532f26fca17c57ba44066db03cd416ee5aa8c0bd61f51f39b9d0340b1fdcc485555ecc64c85eb3707d46b1bab06138fcba8effbe80dcfca29c32151f5adb89ed97c7e6242bce59076b06b57c807159ad56acabedf76ff0d5ecada73042367ccdb0a5590cf2e9731ea0e473a9a60083ab44097330cf9b9e76efac1c73475e126604ef5dc01d6bb86709608258b067e897df978c0daee94596bd940a1287d03ab882036e127d81a1d4e7280825a15227257d171855a528d4c246ff41f8e0229a0f6a33af8c82d3b49fb2a547ada69c36db01b6c083231984f7f5ecc79457bfa93aa60b21a18ac5b5d0b31ffc821651196687f4109c2b0fdb3821b8f4d50834faf3bd0cf1c4d5db3c6448f3726d35cf9677b1ac4b620ac3d6acebac107787c1cf877b034e9f6b856f0eb05468350eaaec0d95e8dd509e719c2b90996f43c7539f0ec13014cf7050fbafaa37524014839bf35f241d135c6dd7d97e65cb235f4f25870e8ce1246a7", 0x1000}, {&(0x7f0000002180)="cb9f4f5f2cefb34f777ba465e507ac27f362e42c9b5cb47fb3ae2270a2a1b6221c4b2f69ff2e720bf56ffe801a76d1e312bd002f1e0fdcca0112025310ad62f93662301899cd414f8734ea476a270ba0879a0a2125cecba63219577f79765d8f2ff7621e68319d5ed08e11ddc4dc1979a5ee9904cca60387667b44bf85d79dac3a5b99184779a735a47ff4322b8ac16e60dbd74fe6bea9157d", 0x99}, {&(0x7f0000000100)="e3f18d3529965f9443fc420a4766e575bb", 0x11}, {&(0x7f0000006000)="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", 0x105}, {&(0x7f0000002340)="d84f", 0x2}, {&(0x7f0000002300)="19376494b301392dd4f4778d925339fed4f7aee2d718bbf405b75daf9bb0ec2812bf932129e60f673efb01a172b279f905e6d5f195cf39d4d291", 0x3a}], 0x7}}, {{&(0x7f0000002400)={0xa, 0x4e21, 0x6, @mcast2, 0x40}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000002440)="8cd100dde8098e7002c099ba7d55d0a3573d7b1216cc2b5e8dc38c868d230b0f69ecf3b52ef32d30c6039b72025106deb5eb43080c4977499445", 0x3a}, {&(0x7f0000002480)="c858676f58b6de81b82764113c7f053add9c6f", 0x13}, {&(0x7f00000024c0)="e7ea5d88888568c7205c3bfbed4ea3961047af4413d51917874b842530173b5fbba59b3efa676eef676f8915e0d3fa305b8d7898e241d3", 0x37}, {&(0x7f0000002500)="7af99d29cc14a805984036b7d7cc2409924333b41fc7497de8208bc3057ccceed0c6dedf36ba5fd7c8f2ef8300a37f602b07729a875b522caa5e6b2e606d81f998af5f21250f027966e1b6d878d91df41de35c4289fc56cc10f457ea60cef8045cbb3dff4895de8151c5fbbf45f48d678d935c43c375571df3efca7ef403e5c8e788ecc1f24c449d6de02c1c3c1c32d2c4ce78d9fbbc6f444256edcced9f64d6", 0xa0}, {&(0x7f00000025c0)="24e76befc612e5bb66f099fb07464d48e9fd51287ec79d6140dd867cefdfa40ffa450d8dd5a23b8931527359db4a897838d28756b6eade1a1544d4861bd53d699ffa0fd940c4f32b1ffacbe53d7bff3fa303fa4b8029ebf5c70bae5bc76f7d53d1fb5b3c4587bb1aa040953f8117ded29f27c0b9da9d33a3b754e41d713507883cf05c8e73ce052f0c56148bb72efbee3b4ee4508f1735bd69c66fe45c82c90f6125de0c0e91544bed7ecbf3893f5294a5b6e5007a", 0xb5}, {&(0x7f0000002680)="e3ac223f7174828ca8e7a1006eacac0571d22203622ebc3e4a3cafbb2fb9b2a953103c2065661c2548966f053fb73e3d7a00be7d854b3eade9c119a278f24c22a20818a049eeb7d0414480633c908c2f20bad1d65148cdf831abe9433f6542fab89039be5dc62b412f2e3d813b2ecdec768ca1a25ed71a30e0fa23f59663133e49cb0df1aeacede0b6b3e49e23e2496bdea2cb61a927e5a75692b03ecd6ef4ba2ebb6dce364359b52ae70c0794f8727f3accd5c1241fd6edac88d9ddf46ceccd561f45cf1c1d87b95ad70eaa166326b90b7f7541596d23552bd201a43eb8e2db4823de600fdc5e12299a0a89", 0xec}, {&(0x7f0000002780)="9c2b592edf6d71629c0991816b85a773961f", 0x12}], 0x7, &(0x7f0000002840)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x1d, 0x13, '\x00', [@ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x3f}, @pad1, @enc_lim, @generic={0x0, 0x86, "8421a936aaf7909c4b6dd8b6aca3e89baf9e226c9ee782b71634aa5fd3f8c3920959a9259a7b260dbd2d4bfa5a3e9b4d7431e7778fefb3d6320c86cc41c6896a9504610240ac1da04bf1226e04a5855b752af84ce079726989e7c4dc232d3fc06376902f7a65fddfb67d25c6db722329e179cf15597d06a1d58bdc0a8ec1827750b2295aabc8"}]}}}], 0xb8}}, {{&(0x7f0000002900)={0xa, 0x4e21, 0x7fff, @remote, 0x80000000}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000002940)="ca79211aa696c08ce12dc595f47d3cfddf05901796d7c24f3bac426832e401d6", 0x20}, {&(0x7f0000002980)="db0f1c021624e58bb2d84442f0fabbdcb10ec5349764cdc6f341c114", 0x1c}, {&(0x7f00000029c0)="01844c557ca321733a89cc5e", 0xc}, {&(0x7f0000002a00)="cd4261d93ce42808fea5eeeebf44c71f78563ecf1748ea58552b9dbade13fc1adbec1f147c39db8bb0f72d04ea10ea6adb0bf668c84f15b8f83e5f8d468dd2bcbb978140b9f3e2fc3f0afa20365849b2f21604ef4ad009f081b92448aeb4137ccc830767176a0474aac512b368724c9ef7f7b4c795ad9e3ccfb7b2b0993238930547ce6d4e670b5cd560b96da8f0d02a5458e9a2840db57705c2dc93ade1ebe486143b40c5bc71f0", 0xa8}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="462d25a8bd7a8d84ceccb4fab93fa5f6128c908fbb7375d5a9eef73cc6ab53266daaaebb942eed033bf09fae6138973708e35c2ebfa81875c352c1fa8c2c74b1d14c7773fad89bfe71cb9975d059c16dd5730e8763b17408bb6c92c4aecdbf17a3b7918ec004b1b811ccd4f6e67d0d5f7e9728c5fca603063df5e26b74763010a3f09ef92d9e516fde2accf1a76a7742b535be63b0a828a471072847b46c83c304e1481cad05126d3c7faa8ceb2c609d242b8fec71b1329ea823c4c56d3c0f0a2f67c8f4eb57496bd8f9728c6a60921b50cf63054360ed1485124214ee887001e071e8d1935663bf507aee97ac6f3b1a147da1b2064713e973b30414", 0xfc}, {&(0x7f0000003bc0)="f138f07bf4582ef12bf75e03b423f3a0", 0x10}, {&(0x7f0000003c00)="bcc6daa8b781598c3d15ece56c41a5e794d7a5a5c73b5a513ce757821540962918a87daef053669e957d9b1f50730fd254720418d0a58473055c734a3ad1170dcb943d3b778e74dfd586d2f7c57aec100ac7fba34372727e0c1e3c50ecec319b0c87f5930da53db29a7f90e9dc1a82d5f5d3170d03a4fafffe0c5045108e4f8ad54b2942d56b778557a0", 0x8a}], 0x8, &(0x7f0000003d40)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr={{0x18, 0x29, 0x39, {0x5e, 0x0, 0x2, 0x1}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x88}}, {{&(0x7f0000003e00)={0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7e94}, 0x1c, &(0x7f0000005100)=[{&(0x7f0000002240)="357995dff6d8c54861a93cef46ec0e95cba41d46bf6c4b5349d25883c21376326e7e715dc248cc5310f30cdc3051e8413a4e123e8a1ec074ec3f15dbdaff0494261c9f012c7f66339d9488e29e3cbe5ae665e6afbd98ed7b4b9f7861feff26a68201a53b9ce39227b4472c122967a33b4681fe3cb5890ecbc0465a28da8ec678edd7067d9fc53b7179ed6169bbd3c9907674fb00c0372a1a", 0x98}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="58be34bd7d959b79eda82a16ee1fb581465321941e370eac15ea453cf1a495200be97376bcc7e58d14f314966c94b85ac4724b17721d72b752a8215a0f20836c5b6180c0f8cf518c58745ee45a47ad4ec73714d19208036e04b9e2f2d25aa119f87b79e95e0b4ceaed02fdf71aebca21390f33b58d65d86b290210f80015a9199a020d83079e7f0e43eaa653e994870a532c34e15d066ab3569a9bc3c87ab9917a43f9e7a0309d3b1a5c3e", 0xab}, {&(0x7f0000005f80)="8c18692453733a46ebd902677892169088794464bae1b02109e2003e7308512bc430c86cb36e0ee21881cd4b2d3821eac029", 0x51}, {&(0x7f0000005040)="f495a0fe9997cd1d427b6663452822d7fe52053736e042af28c07fdc19d45f52e89368c2ab80fe24229cb54974551c75d625a00d2c0630da017d3cc13820982c6687ee22a80ac130ac1ad56829c8ef8bf9416509305539b2e792318e1f516e8e47362d904f3918cec0a9f5c7b1cc9e2694f16400ef440e99240d72d11b5e15aa510bd8bf00ac5d0279fe8fd016a6dab99e55d19fb4d1c19c4b30aecf6d168e90743b0bf2e9c998", 0xa7}], 0x5, &(0x7f0000004fc0)=ANY=[@ANYBLOB="1800003f00000000000000003600000080000000000000003c852030dbb5dd33f9493bcee6893756377d768fd2836cc27c584520466d4fea14931a4906b5ea67950674b660bd931bea0754a6299523308903fc37fa656aab01444c6ae2fa76fc2388167868601a668b5ef3be7b3f63efa75d516645792451fce11b95b7e9"], 0x18}}, {{&(0x7f00000051c0)={0xa, 0x4e24, 0xe4f0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000005340)=[{&(0x7f0000005200)="94565e13006ea0e5f0ce863ada321719d3ab8d705a634dfd04ad4d9f5c6ee32f953017ee680f256f2318381de3cbf2984e224cc4c74071f3b39d90f2d6f5031fd7a6e74f9f98e44f3bfcd79fab41fab197ba4689354d2ec748f4aa440d5d028ad7ee541470e48350d618ca5aaf1bc584876f37811aaa94c07b65291c05dc18a9ed8c6e0bd063b00d5874148286234976d701821efe64c9d5b2e70f65a490", 0x9e}, {&(0x7f00000052c0)="3c3d64245d0ab14e8be8bdb5129c50b94a8e0337222f90a12a2cdfd160c2c3284a7653547e5d891f123d72085a799725222c0d452080a6785c1d344da26106430e60ee827bf83e3ddee7ca892a21e5f16592d468632bd1dc02fa895f9b731aa2ce4ad3fed61ff941dee93abb11f3", 0x6e}], 0x2, &(0x7f0000005380)=ANY=[@ANYBLOB="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"], 0x378}}, {{&(0x7f0000005780)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000005a80)=[{&(0x7f00000057c0)="111d757a624df516e7ab69ec8fc73df4239830aa077f013fac5275421ace35aa1f05c735349586c0c251088d88dc7e9753715b779491f14dea712ed2168f013be888d92f86c8fd34968ba957a89b90e7057fdb1e77623dfe038c356848543e4dcc3375ab915215a5441ed3958c02735401e24dd500d6d628c62e4e0b5d10cf701d81635d3c18322366149b9560c8cd8cb47a", 0x92}, {&(0x7f0000005880)="1c19d9fb408d590f11411f8171f53ceca090b7308d499f5eb553eb13d5fd917861238b9b35147ddbece3653507492ee4b17d1022b0dfb10cf809ff8411092e2eb558d858465a5f0c6ae5cc21c66a2a284c18e0147bc00d4aaaae4dea92e10c76a8f1612126aab7f94642c168c587aab414b24d2565ad9e92ca81d8b17f0e02628d4b205da79bb9b906e318fef078bdd7cd778ab48f088a84e5e28bc44053f5", 0x9f}, {&(0x7f0000005940)="87f553267cbc6f77dfcb265b737aebed24230d6a8c97e5acc44a9eed353f75715ec612c0890736544ecd91205118be24189be2c3bad20375d9da923bc39880ae6416a4bb9e138af5153b436a56904fbc493ab160fc059b36522b507c25f685f31367840857cd6f561f12160aa441f5678500b60c88df276ff0a7727f1e4dc7792480f94dfab203b3da0e66c1cafa7fef356efb4e5178113e9db049e4d28a454384489cfc5f4151352fe74aa831b0f09e", 0xb0}, {&(0x7f0000005a00)="180f90621f9baa62398e8bb25c9993e402b044a49e8c3abb5dadc996dbb47c84301aa40eda2529c06ce34b9f9b2e1ee4cb9fdc2ffe4b686ccda0e6c31c09785719c1a1330ac3", 0x46}], 0x4}}, {{&(0x7f0000005ac0)={0xa, 0x4e21, 0x9, @private0, 0xfffffc00}, 0x1c, &(0x7f0000005c40)=[{&(0x7f0000005b00)="f8ea1fd0cdde2d43e278bee2c0195082358c580a30ff4f51452b78e6fd3c27d019fed06a1124dd8808ad95dea2c7", 0x2e}, {&(0x7f0000005b40)="4170b61f31447b9221488697baffe7819ca6bb6884768b07d71fdb047f03", 0x1e}, {&(0x7f0000005b80)="899f10dbb0f25e575c9fed3482067ef46b11351f54dc1d753b231c1d1071626dbd42538fd9fc2557b4bc5b3bc2a0d1a8b564bd07ab6148825c1e13a621eabd69a998e4325d270edeeaa9051f474ec9c999dc05a02821d182a00ca09e252f1c6a8c26dd8361669790b162374cd50fec2277e990010b0687740f2c73ef5195c9afbedefd95d898e52e825d719afb563f9c7550d3b6252c86ff2b8af30b753df62d21a8175baa6f3dbf2278e0075c31f4eb7260be517ee32a0dce", 0xb9}], 0x3, &(0x7f0000005c80)=[@dstopts_2292={{0x90, 0x29, 0x4, {0x84, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @pad1, @ra={0x5, 0x2, 0x3}, @pad1, @generic={0x8, 0x5e, "29685fbb13f448a4b260729ca9c36b9371d53297d26209a636c4dc9ceeb3f272ed6ee10a34ead5a6c0b425f51c5c38cc21bec839bf785e537f9c609ae3e747ac24edbf3e4d402a978f4dd4f0f15851f64fcd5fe0b69120c78462fef1a363"}, @pad1, @ra={0x5, 0x2, 0x4f0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1000}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x24, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9dcb}}], 0x128}}], 0x7, 0x4000) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r8}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000005180)={@private0, 0x6e, r8}) setgid(0x0) 23:38:20 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 3) 23:38:20 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/rtc_cmos', 0x101000, 0x140) io_uring_enter(r0, 0x3ac8, 0xe3be, 0x3, &(0x7f0000000240)={[0x80000000]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) syz_io_uring_setup(0x7fb2, &(0x7f0000000080)={0x0, 0x31bc, 0x8, 0x1, 0x276, 0x0, r2}, &(0x7f0000b89000/0x1000)=nil, &(0x7f00008c8000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3e1) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() pipe(&(0x7f0000000180)) 23:38:20 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 4) 23:38:20 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 4) 23:38:20 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1646.259305] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:38:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYBLOB="0000b101cc518647a424ff43174cd9a5912ee71e9486d144d2e7ab2e56749c5bba9df3daf837b9173585abc5423d2e8ce85b1e16196cfc0500b6c042c212cef35a8508000000000000008402dccd2fd200000080e45e3892176aff7fcb0f1c5114d7309965bc345fe75b51a240b62e", @ANYBLOB="680835512f313ca1ad114c38f6b13792fc5384b2f21a45a5ce5414039005f9535aacf283cfcd"]) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1646.286415] FAULT_INJECTION: forcing a failure. [ 1646.286415] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.287932] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1646.289143] CPU: 0 PID: 23026 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1646.291707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.293392] Call Trace: [ 1646.293960] dump_stack+0x107/0x167 [ 1646.294715] should_fail.cold+0x5/0xa [ 1646.295493] ? create_object.isra.0+0x3a/0xa20 [ 1646.296417] should_failslab+0x5/0x20 [ 1646.297181] kmem_cache_alloc+0x5b/0x310 [ 1646.298012] create_object.isra.0+0x3a/0xa20 [ 1646.298922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.299969] __kmalloc+0x16e/0x390 [ 1646.300695] alloc_pipe_info+0x1e5/0x590 [ 1646.301514] splice_direct_to_actor+0x774/0x980 [ 1646.302459] ? _cond_resched+0x12/0x80 [ 1646.303253] ? pipe_to_sendpage+0x380/0x380 [ 1646.304145] ? selinux_file_permission+0x92/0x520 [ 1646.305127] ? do_splice_to+0x160/0x160 [ 1646.305964] ? security_file_permission+0x24e/0x570 [ 1646.306989] do_splice_direct+0x1c4/0x290 [ 1646.307825] ? splice_direct_to_actor+0x980/0x980 [ 1646.308797] ? selinux_file_permission+0x92/0x520 [ 1646.309780] ? security_file_permission+0x24e/0x570 [ 1646.310822] vfs_copy_file_range+0x4f8/0x1290 [ 1646.311747] ? generic_file_rw_checks+0x240/0x240 [ 1646.312738] ? __fget_files+0x296/0x4c0 [ 1646.313560] __do_sys_copy_file_range+0x193/0x420 [ 1646.314556] ? vfs_copy_file_range+0x1290/0x1290 [ 1646.315515] ? ksys_write+0x1a9/0x260 [ 1646.316291] ? __ia32_sys_read+0xb0/0xb0 [ 1646.317113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.318205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.319249] do_syscall_64+0x33/0x40 [ 1646.320005] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1646.321032] RIP: 0033:0x7f0aae61ab19 [ 1646.321783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.325481] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1646.327039] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1646.328491] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1646.329975] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1646.331423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.332871] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1646.339495] FAULT_INJECTION: forcing a failure. [ 1646.339495] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.342294] CPU: 1 PID: 23001 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1646.343725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.345433] Call Trace: [ 1646.346021] dump_stack+0x107/0x167 [ 1646.346801] should_fail.cold+0x5/0xa [ 1646.347608] ? create_object.isra.0+0x3a/0xa20 [ 1646.348559] should_failslab+0x5/0x20 [ 1646.349347] kmem_cache_alloc+0x5b/0x310 [ 1646.350207] create_object.isra.0+0x3a/0xa20 [ 1646.351122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.352171] __kmalloc+0x16e/0x390 [ 1646.352926] alloc_pipe_info+0x1e5/0x590 [ 1646.353777] splice_direct_to_actor+0x774/0x980 [ 1646.354764] ? _cond_resched+0x12/0x80 [ 1646.355569] ? pipe_to_sendpage+0x380/0x380 [ 1646.356462] ? selinux_file_permission+0x92/0x520 [ 1646.357463] ? do_splice_to+0x160/0x160 [ 1646.358298] ? security_file_permission+0x24e/0x570 [ 1646.359349] do_splice_direct+0x1c4/0x290 [ 1646.360207] ? splice_direct_to_actor+0x980/0x980 [ 1646.361193] ? selinux_file_permission+0x92/0x520 [ 1646.362210] ? security_file_permission+0x24e/0x570 [ 1646.363251] vfs_copy_file_range+0x4f8/0x1290 [ 1646.364191] ? generic_file_rw_checks+0x240/0x240 [ 1646.365194] ? __fget_files+0x296/0x4c0 [ 1646.366064] __do_sys_copy_file_range+0x193/0x420 [ 1646.367073] ? vfs_copy_file_range+0x1290/0x1290 [ 1646.368045] ? ksys_write+0x1a9/0x260 [ 1646.368843] ? __ia32_sys_read+0xb0/0xb0 [ 1646.369695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.370799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.371870] do_syscall_64+0x33/0x40 [ 1646.372637] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1646.373691] RIP: 0033:0x7fcbfd904b19 [ 1646.374479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.378235] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1646.379794] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1646.381258] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1646.382732] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1646.384204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.385659] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:38:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb9dcc0d8da3a4f6f42444a1948f422c8d8d2d8bba069588783e32b713"}, 0xd8) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x60}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="010200001100200018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) bind$inet6(r2, &(0x7f0000001d00)={0xa, 0x4e24, 0x3f, @private0, 0x7}, 0x1c) pwrite64(r1, &(0x7f0000000100)="2e12754dfbefc88d5e", 0x9, 0x5) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000140)=@caif=@util, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000580)=""/228, 0xe4}], 0x3}, 0xfffffffa}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/164, 0xa4}, {&(0x7f00000019c0)=""/103, 0x67}, {&(0x7f0000001a40)=""/225, 0xe1}], 0x6, &(0x7f0000001bc0)=""/112, 0x70}, 0x5}], 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) [ 1646.526122] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 23:38:20 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:20 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:20 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:36 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:36 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000b, 0x10, r1, 0xff25c000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xcd, 0x4b, 0x9, 0x9, 0x0, 0x2, 0xc4040, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0xbd2a30c93dc8321}, 0x530c0, 0x8, 0x7c8, 0x9, 0xad, 0x4, 0xfffb, 0x0, 0x4, 0x0, 0x6d18}, 0x0, 0xc, r0, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x1, 0x3b, 0x7f, 0x3, 0x6, 0x6, 0x2d8, 0x40, 0x80, 0xf6, 0x800, 0x38, 0x2, 0x8, 0x0, 0x6}, [{0x60000000, 0xfffffffc, 0x5, 0xcc9, 0x101, 0x6, 0x1f, 0x1}], "060832e19fb12d4ed81c7aa8574a839fdb305cc4412e22bff54d917e3c1242a6ef192a6efadbbb87571fa5f4cdb038502b70fbef5d04454aab94737718b62cecddf045958742e95326441368c44096578591", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaca) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) pread64(r2, &(0x7f0000000340)=""/4096, 0x1000, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x5bc) io_uring_enter(r3, 0x30f9, 0xf6ea, 0x2, &(0x7f0000000180)={[0x80]}, 0x8) fork() 23:38:36 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 5) 23:38:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 5) 23:38:36 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x64}, {0x6}]}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 1662.372119] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1662.374528] FAULT_INJECTION: forcing a failure. [ 1662.374528] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.375907] CPU: 1 PID: 23234 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1662.376688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.377623] Call Trace: [ 1662.377926] dump_stack+0x107/0x167 [ 1662.378367] should_fail.cold+0x5/0xa [ 1662.378799] ? alloc_pipe_info+0x1e5/0x590 [ 1662.379277] should_failslab+0x5/0x20 [ 1662.379711] __kmalloc+0x72/0x390 [ 1662.380104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.380676] alloc_pipe_info+0x1e5/0x590 [ 1662.381141] splice_direct_to_actor+0x774/0x980 [ 1662.381685] ? _cond_resched+0x12/0x80 [ 1662.382151] ? pipe_to_sendpage+0x380/0x380 [ 1662.382662] ? selinux_file_permission+0x92/0x520 [ 1662.383235] ? do_splice_to+0x160/0x160 [ 1662.383697] ? security_file_permission+0x24e/0x570 [ 1662.384291] do_splice_direct+0x1c4/0x290 [ 1662.384776] ? splice_direct_to_actor+0x980/0x980 [ 1662.385336] ? selinux_file_permission+0x92/0x520 [ 1662.385915] ? security_file_permission+0x24e/0x570 [ 1662.386497] vfs_copy_file_range+0x4f8/0x1290 [ 1662.387016] ? generic_file_rw_checks+0x240/0x240 [ 1662.387577] ? __fget_files+0x296/0x4c0 23:38:36 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2480, 0x0) ftruncate(r1, 0x1000003) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) syz_io_uring_setup(0x9b9, &(0x7f0000000080)={0x0, 0x1230, 0x2, 0x1, 0x3c7, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1662.388062] __do_sys_copy_file_range+0x193/0x420 [ 1662.388800] ? vfs_copy_file_range+0x1290/0x1290 [ 1662.389358] ? ksys_write+0x1a9/0x260 [ 1662.389829] ? __ia32_sys_read+0xb0/0xb0 [ 1662.390301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.390915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.391519] do_syscall_64+0x33/0x40 [ 1662.391942] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1662.392539] RIP: 0033:0x7f0aae61ab19 [ 1662.392959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.395085] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1662.395967] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1662.396795] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1662.397629] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1662.398473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.399302] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1662.409722] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1662.418348] FAULT_INJECTION: forcing a failure. [ 1662.418348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1662.419823] CPU: 1 PID: 23228 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1662.420580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.421509] Call Trace: [ 1662.421808] dump_stack+0x107/0x167 [ 1662.422226] should_fail.cold+0x5/0xa [ 1662.422657] __alloc_pages_nodemask+0x182/0x600 [ 1662.423178] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1662.423832] ? lock_downgrade+0x6d0/0x6d0 [ 1662.424294] ? lock_acquire+0x197/0x470 [ 1662.424745] alloc_pages_vma+0xbb/0x410 [ 1662.425185] shmem_alloc_page+0x10f/0x1e0 [ 1662.425649] ? shmem_init_inode+0x20/0x20 [ 1662.426138] ? percpu_counter_add_batch+0x8b/0x140 23:38:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1662.426688] ? __vm_enough_memory+0x184/0x360 [ 1662.427383] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1662.428007] ? shmem_unuse_inode+0xf60/0xf60 [ 1662.428497] ? avc_has_perm+0xc5/0x1b0 [ 1662.428950] ? avc_has_perm+0x108/0x1b0 [ 1662.429395] shmem_file_read_iter+0x2a6/0xbb0 [ 1662.429914] ? do_syscall_64+0x33/0x40 [ 1662.430357] ? shmem_get_link+0x440/0x440 [ 1662.430884] ? iov_iter_pipe+0xf1/0x2a0 [ 1662.431360] generic_file_splice_read+0x455/0x6d0 [ 1662.431906] ? pipe_to_user+0x170/0x170 [ 1662.432367] ? _cond_resched+0x12/0x80 [ 1662.432823] ? lockdep_init_map_type+0x2c7/0x780 [ 1662.433363] ? pipe_to_user+0x170/0x170 [ 1662.433818] do_splice_to+0x10e/0x160 [ 1662.434268] splice_direct_to_actor+0x2fe/0x980 [ 1662.434799] ? pipe_to_sendpage+0x380/0x380 [ 1662.435296] ? do_splice_to+0x160/0x160 [ 1662.435754] ? security_file_permission+0x24e/0x570 [ 1662.436327] do_splice_direct+0x1c4/0x290 [ 1662.436788] ? splice_direct_to_actor+0x980/0x980 [ 1662.437318] ? selinux_file_permission+0x92/0x520 [ 1662.437857] ? security_file_permission+0x24e/0x570 [ 1662.438428] vfs_copy_file_range+0x4f8/0x1290 [ 1662.438931] ? generic_file_rw_checks+0x240/0x240 [ 1662.439467] ? __fget_files+0x296/0x4c0 [ 1662.439934] __do_sys_copy_file_range+0x193/0x420 [ 1662.440463] ? vfs_copy_file_range+0x1290/0x1290 [ 1662.441001] ? ksys_write+0x1a9/0x260 [ 1662.441421] ? __ia32_sys_read+0xb0/0xb0 [ 1662.441891] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.442470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.443062] do_syscall_64+0x33/0x40 [ 1662.443467] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1662.444054] RIP: 0033:0x7fcbfd904b19 [ 1662.444465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.446570] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1662.447396] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1662.448218] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1662.449022] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1662.449836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.450653] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0x0) setfsgid(0xee01) mount$9p_unix(0x0, 0x0, &(0x7f0000000040), 0x3b175157a44ccfd3, &(0x7f0000000080)={'trans=unix,', {[{@access_user}, {@privport}, {@dfltgid}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x6, 'ip6gretap0\x00', {0xe6}, 0x200}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x8, &(0x7f00000007c0)=[{&(0x7f00000002c0)="2ff3b66c7cdfdd001b8ceb2875d831d603bc5fac4a33509a30f08285723e67d47ea4d39c15cbf6a3f14ce0ee05ac4d67a3eee62ab4bde6db7fd1f926af997af0b5c0b691c8", 0x45, 0xffffffffffffffff}, {&(0x7f00000003c0)="038b72fe68cb2a5f76e08525fe7dc70bf4d2f1353807c505c1f375a9d6a1ce0c3724d422ccd96877b9bc84ec9543024a04d1c43f2c0c685161", 0x39, 0x3f}, {&(0x7f0000000400)="46b732a1563906a6111ee0dc10c1d24983d24492e37a299d07d5f18bfbb88bd4b138aa0a777bb4972da287ef0badcc2327fed337379b765c825edb3dd87f91218da6258eddee88c37187626ce20db897dbe475165a6f35133133ede38ea5a0bd60f2d51af5567f10c3f5e84092a2e1fa4cee070fbbbf649ab0e436c60f44287632a4c9cc9e3e673eae81dccc796f2fb434293e3356addb08c37bd1bbd1d8c92c99", 0xa1, 0x8001}, {&(0x7f0000000500)="cf2992b1c92a1f7451a0c16552a5e4dde22e2a59b8bf65df35384cf7fb9bbf8071c8d0a7673fd8b529cf5565dd68fc9ecf62e7405bd0556b194606333a49ad8bc8d5365d382dd19e00937165ef25864e453abd07b26a7ea6fcff64d831e6b9b9466eaf4a3cc2421e4b49b1e4f9dd05534167", 0x72}, {&(0x7f0000000580)="47bac212c9114d63ef50cae6ce82fca0ed91bc0591801545b9bee975bd1cdb53601f8eef9b01bb5978ffb2ff303ab40158bb56b36bc7bd97665ae838d40948e124767d8550d442ab877cf41f83531494b3f11f592a4358cc8b20188ce1c0b5252cb0a5da786b8c9b204cb6ab72e73e60070b4251184c5b0991e8f3e4a754dd7af555162bf7c781b7b3838293a283cd41c02a52de6f280fb43c9235cee1ae7f8729bf6354bdfa9210eb2acffdee5995a1b42bd4fbb74b6c9a3da9d93e439414d61a89b57798ed2155d425a82f4ffa3eb65bd129de3bf96bb7dbe3aba0d1c0842b482f", 0xe2, 0x58}, {&(0x7f0000000680)="a2203f5c8ec81b1c6cba9b1538a8b2d5afc0abea75a828c57e0303d008734c7a236d0cf0c7e708ad37bca0b21c6f26759e089a5c6418a64e41f127c31790bd8fadb5ea2844a4c12dd7e131ffd80ae8a0f9b662dc0b3b5f6168d14ba3ce5839a36c0a189c2c5b4e14855b415f3d631350a5572e5d8b1067894dfbb232637957433f", 0x81, 0xffffffff}, {&(0x7f0000000740)="54a8641bb26e445197751b4f8fceb3d97ab83e164980cec91d6a38e92b68475fe4aa105c5441e286789ec298403b15d45868a1561e8c81bce9", 0x39}, {&(0x7f0000000780)="f4c0a25513a102a2b82634e01b69827d9318e5096c5e0d6781c86a83f69179f26aa8f32e9e52421d52fc8de1cc23ce500a23fd68a40eca1422", 0x39, 0xfb2a}], 0x4, &(0x7f0000000880)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@mode={'mode', 0x3d, 0xffffffffffff65e5}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@fsmagic={'fsmagic', 0x3d, 0x40}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type}]}) mkdirat(r2, &(0x7f0000000940)='./file0/file0\x00', 0x81) r3 = open(&(0x7f0000000180)='./file0\x00', 0x442080, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 23:38:36 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 6) [ 1662.576429] tmpfs: Bad value for 'mode' [ 1662.585134] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1662.592508] FAULT_INJECTION: forcing a failure. [ 1662.592508] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.593987] CPU: 1 PID: 23404 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1662.594758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.595637] Call Trace: [ 1662.595933] dump_stack+0x107/0x167 [ 1662.596332] should_fail.cold+0x5/0xa [ 1662.596751] ? create_object.isra.0+0x3a/0xa20 [ 1662.597248] should_failslab+0x5/0x20 [ 1662.597653] kmem_cache_alloc+0x5b/0x310 [ 1662.598101] create_object.isra.0+0x3a/0xa20 [ 1662.598572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.599125] __kmalloc+0x16e/0x390 [ 1662.599519] alloc_pipe_info+0x1e5/0x590 [ 1662.599965] splice_direct_to_actor+0x774/0x980 [ 1662.600470] ? _cond_resched+0x12/0x80 [ 1662.600887] ? pipe_to_sendpage+0x380/0x380 [ 1662.601349] ? selinux_file_permission+0x92/0x520 [ 1662.601872] ? do_splice_to+0x160/0x160 [ 1662.602304] ? security_file_permission+0x24e/0x570 [ 1662.602844] do_splice_direct+0x1c4/0x290 [ 1662.603296] ? splice_direct_to_actor+0x980/0x980 [ 1662.603814] ? selinux_file_permission+0x92/0x520 [ 1662.604329] ? security_file_permission+0x24e/0x570 [ 1662.604888] vfs_copy_file_range+0x4f8/0x1290 [ 1662.605369] ? generic_file_rw_checks+0x240/0x240 [ 1662.605896] ? __fget_files+0x296/0x4c0 [ 1662.606352] __do_sys_copy_file_range+0x193/0x420 [ 1662.606870] ? vfs_copy_file_range+0x1290/0x1290 [ 1662.607394] ? ksys_write+0x1a9/0x260 [ 1662.607802] ? __ia32_sys_read+0xb0/0xb0 [ 1662.608240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.608796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.609350] do_syscall_64+0x33/0x40 [ 1662.609750] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1662.610305] RIP: 0033:0x7f0aae61ab19 [ 1662.610705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.612655] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1662.613475] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1662.614247] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1662.615006] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1662.615770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.616529] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:38:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 6) 23:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r3}, 0x14) sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x571, @mcast1, 0x5}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="eccfa6d9b2129161313a07ba5750cf035d201ccff656a9daf04e4e29bd25c2c2e8b9afd001c910ba4f616797c2d2b07f1052275fe2b7b242faac9e2727920c5656f345a81030e47ab685104cef7d8d2d1333e9a06c2f143faa0b7e85c0bf8fe575bfe0e6f876743f69f7bfec74c3dc3528b940d89e8b27c705ce055fcf59f7d282515c487959480698d7e611088503253c8341bcab4a8bbc13b11cefa33f59f42f0c148f942d9e53f406ca90db048239bcebd373e31c3b", 0xb7}, {&(0x7f0000001240)="c725974a2bc0e3fc92e50faa5ae07e63ba71254e43a1f8cf4fecc988b3fdb8ef3d0146471f17e37bdb9a6b34e2321124e5bddb9cfa944dc1fb0e1aea61dd559774a6f424162f8d07637f0ac34734480e64405cc61a", 0x55}, {&(0x7f00000012c0)="9512d9a799ee793619caf0eec2189ff3c6833363f865bbb66c7ba6dbb7e94864bac0ea3d9f09b4c976d0ad775d85c731b2e79aa88f7d2a53261d0da81cea5d07fd721768664def9549fa190cb4bc1d6d22b67e051a1eefe0032f4301be043cf42e9957de8ff044d71c198b071f6da96bba75302b8d271fb0f5bad3e4bdeefd6d785aac1bdbb9e207992d67ab25ed002d9ac726a2bd253f25dde270ca81c4af3c53a3f0216cb498679294ef5455ea455ba561b299b2f62c84821cadb7f4f288cbd851ca4b18289788c32bb080", 0xcc}, {&(0x7f00000013c0)="0139fdaa16a61f1e493fcdab80c04637c942043a1fdba7f5518a1c88d656c8098503cb7abb2287910e1c97fdcbdff694abf3138bb8111f0d51a939445ea6c774e6aa301a8d5fa1a5c353305f2c9b70ae9d1b3333f2da62c204faa0f32c57f2c45468edb7b5c0f396140e7ab5da8930c2a442be4b9442e50c60e22a20dd6008b904e1b085a8ca9888f64fa04ae80f12dc393d180c28e00b6d3e0ac05505c4a7beecc52f626798df51ab6fdeeb3b862fbfd0ca9c2ce26d88d3bed81c4ce03a13e24216888b", 0xc4}, {&(0x7f00000014c0)="3ff25488aaf4d83921eacd07f63ae26730bdab9da100aff7838f224b196460d6ac58540757cb8a7ea3853344ecda60b7c432e45276a5897744e41351ab1252b0007d99ccb1b4a6b34505bee44835d3bad03b38e30d0575f0524b59d732d972d0aec0e165200a1013b3ddf9e7e8b5ad7fdd5834b4e1288bc3f2269003bee6999082c8c3ce8788ff9e97c3d273b8cd8b1890", 0x91}], 0x6}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x7fe00000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000100)="173726234c8193c88a", 0x9}, {&(0x7f0000001600)="3ef03acb9ed54f16ba571e9743cea1c13f8f0c01af06a3bc707c058d9bc1d9bab19b0cef0d0c78acaf6c01704da9c87b1c5649c04e6072b86544bc5f98dbf9dbe5c569ca981ae0b52df1f1de842688ec6d955eb0f5a743a04c0c1159d14833edee9f6004ececb228792aa954a5adc871df0f773833e95dfb63707a018068b9ecb736339386e4bc3fc06c86cc34b799ab0077d7a1a7e0dfcde487055a12e0ad1d", 0xa0}, {&(0x7f00000016c0)="c9242ca5ef49f89f8d0b374054d0ba76f4556e593eab809aabda036075e26cd61b148eca785a4ed70e301946f4734ffe4ac4a0d0c17d8a5fedaa62d0b1711b39c57b492f8f72a643bc1a3d11c44aac93b5ca2ab88bdd3ef9a12424a7a1b8ce7fc29ec22b3aae0593b2d6dc9daae59c96014085807f3048b7bf3d0722d2206b2b7daf4c21d6ef6256674fa0bc79addd", 0x8f}, {&(0x7f0000001780)="62756564652df50661b74231f7e07983f2a33003f986a16cf9be24fbc32671849cfb903ad6bb89677b75293755a5708d2fe45cad74ec1cc60f52f443f46308c2d9b1e28be0c289a6501ca75d1a96a6f804b4fa2845de02d53e41d63998714676c9fb45ca5102180c260b2255f55010c291aee6c41f696c8ad08b4bbfa95d874cb44ef109ae597539638b47ac9c44f597dba29d2b86e152700de7b2eb87f54d5ff8a21c236da1870eaeb213a527f6b28fc95fb4", 0xb3}], 0x4, &(0x7f0000001880)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x68, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x10000}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x46, 0x18, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0x91, "b69b9e97b473c5f83d7df84380111cbae2fd01f7b1a915f0b296c21196dd99fd15368ec547d4b3b6e8586dff58093cb5b84456547630eb54d8b20187dea0c9039050e370153a85614f8d5110326fcc39fea6dbe4076abc193fe4a577decf1a279ca2630961567e2836bc30873e951378b7b3a646b70631faf3d6793ab4bebe7aea20ad4974feddc81cb203fe2302d56a57"}, @ra={0x5, 0x2, 0x8000}, @hao={0xc9, 0x10, @remote}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}], 0x158}}, {{&(0x7f0000001a00)={0xa, 0x4e23, 0x1, @mcast1, 0x7fff}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="50f05fdee9fb7c5cd198e488661b4bf903f550142afe8ac25e856c97f9d875258b64ef8781b28d61ab3509419a3288892f7065c2c88a007508e23646cacaacdf81da8ecd6e255352ce18bad0d14498a7c5ca496035", 0x55}], 0x1, &(0x7f0000001b00)=[@dstopts_2292={{0x148, 0x29, 0x4, {0x8, 0x25, '\x00', [@generic={0x4, 0xf2, "35d31454974cb7695dc37535d45819f474f1f2b22481c0ac60a62c3f85a322998802f8af542f00a52af37c63b8ac9496e6c16cc647a8b2ba0f0f8ee0ebfe823e201c33438fc2ad14c98f4d405ddc415f3342e7f83f81fc970d8672c1aa1595ef86fe7fcc48ef65d46e8b8ac03b5981e830d058fdecc3b11017f824c3b300cb0d4085bd8bda522d673484528a7731648ecc3099bd721febaf9f8b712c4a6e1293c7f5f6517556c9195ade54f183498a58eb615a3d801cd86072ac136ca43bc54a9b494ea966b643e4bd5bd54df4844b8933e7e1f8dd65dfa983bb0b492ab9f6a859957db1ec285ace24aff5ffe649eebca70e"}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x7f, [0x1]}}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0x7fff}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x44}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x0, 0x5, 0x0, [@rand_addr=' \x01\x00', @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}], 0x198}}, {{&(0x7f0000001cc0)={0xa, 0x4e22, 0x8, @empty, 0xfffffffd}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000001d00)="04d1002da5cbcd9535adcdebf51765b7102869aeed384f904874e206200ce546b273a04e836f628f1372dce39f29856b0ec023e9926a549aac2fc4cfdd901bbdfe1d17dfce9d019d4bc00a73", 0x4c}, {&(0x7f0000001d80)="fde05cfdbe56062523b725e1692533800e10a4a0ea0e44464295970c9b90c63d720630bf2df960554a9758f83deb276c842eb593eede841c8d599a7f87bec8c4021d277e4f73ba78dabd76b02d2375a055ddcf456a1879a6efabb1eeed57b0408805e1e86ff2c01d3ab689b31c2086c6dccee6a29df79d261e7b323c9cb90f3020292f8b0331c57e5865933c58c768ef209c738fa2c7b69aa3390bd965ceddcd78d8a494b06cf7ea0f4689032b147e3890539d34b8365e7f458165455a6e9db4eda51dc6751e987ef116f5592d922257eb5b33c2f1b1e6e7a4bf49190dfa9d709df3470a870ff036a938c52decf22d0a706991fe4405c5", 0xf7}, {&(0x7f0000001e80)="59438e5e2bd1799a3f7d4b21b596411f475818fae1aba113754b84bcd6d26d131df94ff5b0f3bb68918dd0bb6741330547a72493b58af172d23e00b2b6ec309dc5c02cc23db1e4b69244601f77428ead44491e122ff40f702fbb46456a", 0x5d}, {&(0x7f0000001f00)="87900b0b7767239f682730cc73b6260b8311609a6a1de4c4ca2c83b9416983f0fa6e7177f6d3ba611a70d684d8960383", 0x30}, {&(0x7f0000002980)="57c4595bd91fd7e499af776b80c0626108bc67d5698b3036b0d2d9e575db6986b006cd8561bed5f626a94b98174f9595251a29041ceea8d9821140b74664c3dc404224f05c54aaa8aa749a4f22398d7031102915df596fe339d7fca13e50d079aca950c840b2ecf4496f3d95baf1b295dec4425159b6fea1b2fa5cc059046b0d77785b4a9a6d2317ee4acbeeec334e305f99bcca7c2439bc0c661be2f523195cdaf7a52e09e011401df755a5e22a474ddc86270c97b02522534d9f5dfbe66d127427768f31fd40c535df7490fb1b5ba7fb911d5592a100000000000000", 0xdd}, {&(0x7f0000002000)="fbb001cd7113fd20158e4fb8b7b8080a2dd56b6eee114c6b8dc31312f1b53e8b8677c83f52367512b54cbe181ea227d7dc231584f825e40f8c01dbe8375999e47b0170f5094f5aa166ef9e03e19a881bc67682586f4b9f118934e131ed85d7a81245a5aef549b057c1859664c9c036f18fd2674a2dc8b76473ce049f08a58553dd9485240029c4d069134a8b314e344a492e4b79ac0b478f991cdaa11ba4a832448dd0e34d70610e3e892e12f23e0edea1ee84ee1f4f31c20ce7c854fc8d2be1e11bdde6a52ba7eef87bc105b37209c2641df2100f8bbb95e061c04819", 0xdd}, {&(0x7f0000002100)="4bf4ef8c6dd51fa4b02665fc031eb7cc78eaed3890f00176c7301ad3ce1c755889892ab0dac09619ecaef1a3f0f2ca8e5695f07f1993c8936234d6a8d1b19ab4ac404bb6f3aae71fd9a0e00d62e6653247ef0856100d9eb745ba93663cb257b1c84ef65384abdcd03f29c69c14fa974bc83194b55528c79d301434e722f4ca7d2b37a63e9eb5b5", 0x87}, {&(0x7f00000021c0)="bc713cf9fd3eccb1adccdfc2bc667dcd08a8c4632a53d5539d93cde70921e764c87210809b580e3faff5fa85015ad4ed6d264b89138da5234e235e45babffa19dc3c0224610f08ad18011afe433af4b4649799a345db6303ac59e56689493cf7d34c52898ef080627e100c4f773f054710562acd9b0ede52c5cc9320cc73dc44249d885cea61e4a09f9837e1706ec7e9b3d52d1447ccabd159d07268eda2b518009480776c3d983b761ff949739175ac08f50efd694263a1305d", 0xba}, {&(0x7f0000002280)="135f50200af60111337076bd6ff0b0b74e3bbb960427bec15cd776f8e867502b950ceb9dbeae8acb774a79e5b124efb22e689f8b5a3ad1d892fbcaff06c85349dc2c80cceca02bfef85296a6944feb20426e13ccad277b8584b594f1ff0355d571b33ce6274aeb3b0777ead895b9b1f69522c34c00ccaa65175a7e34b845552668", 0x81}, {&(0x7f0000002340)="4ec1d4a5da03287cbe6ffd5743f4dc4acac2dacc7354ad5c0e4acb5505bf8b182e58cf94d4aeca4dda219ccafc174196dcf2d8dc6c8506867f39d11fe1524fd342a55e18e53c2acc72d8dbb0658fb7e53f41308e2eeeb484ec0998f0aff7f6fca6133cf2e9bb2fbf781fa42af9897d6cfc21ab594e5975211c4aa0386b0d37b2bb6717bfce5f56b240e95dc662741f993ad066885c2860032b450f546775a0b89922de8a3947c5af88d868c6f3c627be6bda23e25501742ac072ba099fdd59427b4c045f2f28eb49189991e7ab1002289d9d3bdfab399e4d9a3e370af9e34e212e948dadcc73bdea010da10c1b2c46a3", 0xf0}], 0xa}}, {{&(0x7f0000002500)={0xa, 0x4e20, 0x9, @mcast2, 0x6cbd}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002540)="5913428c51d012a9661a7324a856feb04d87c4bf189925027a3cd00632d3d3c833dc9282236a284b5e1bc12abdb261e0b3a75d8d30eaac34fc81043b2bf3cec0761fcbb8ecbd088a4e2bb7929aaa7f6cf3e863a24097dc06b59eea4cd3e5635c8d9549591856ec6889a4dfa8ed67f15dcabf86b09bdab0d7862e6bc2e03e", 0x7e}, {&(0x7f00000025c0)="dd8903259e2125234561b5d0a2a698bd2196bac86dfdc7f93a0db67e1c502876e5ad69ab350ba09521f0c50b7c0bc6bb3ee347617b9078932309e54c7e4ce54e5079b647c3d05948ec491ba446fc310c1f9faf6f4f22f60e3d4af68645b4795248ec55ea85426ba6525139371906c90451ada619e77d3b1f624cf3c4ead44a429a33d2f6f0f947f6fcdd2be81f", 0x8d}, {&(0x7f0000002680)="fa3e4185a466b83eb6059367176aca5e75024943ce2d16017e91a578e50fb9f07ec8cd899b5500e117cdb7c0df76ade17f52c3a48b69e1ed41d62ba37665bf0f38f37092f0e68449bd290ed68e86ca37b5c2301695443814006a405193707b8be565de2dc6213a43aa41", 0x6a}, {&(0x7f0000002700)="a8883abc", 0x4}, {&(0x7f0000002740)="21e03757bfff8ba3338e8660333ca1e862c8ed97fb20111b60598bd8fe", 0x1d}], 0x5, &(0x7f0000002800)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x38}}], 0x5, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:36 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:36 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1662.717799] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:38:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:36 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000827bd70000000000000000000080002000700000008000c0003000000"], 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '%+!@$\\\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\\!:^\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x41) [ 1662.743109] FAULT_INJECTION: forcing a failure. [ 1662.743109] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.744551] CPU: 1 PID: 23556 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1662.745301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.746195] Call Trace: [ 1662.746489] dump_stack+0x107/0x167 [ 1662.746911] should_fail.cold+0x5/0xa [ 1662.747346] ? create_object.isra.0+0x3a/0xa20 [ 1662.747865] should_failslab+0x5/0x20 [ 1662.748300] kmem_cache_alloc+0x5b/0x310 [ 1662.748763] create_object.isra.0+0x3a/0xa20 [ 1662.749257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.749823] __kmalloc+0x16e/0x390 [ 1662.750267] alloc_pipe_info+0x1e5/0x590 [ 1662.750733] splice_direct_to_actor+0x774/0x980 [ 1662.751258] ? _cond_resched+0x12/0x80 [ 1662.751697] ? pipe_to_sendpage+0x380/0x380 [ 1662.752175] ? selinux_file_permission+0x92/0x520 [ 1662.752710] ? do_splice_to+0x160/0x160 [ 1662.753154] ? security_file_permission+0x24e/0x570 [ 1662.753725] do_splice_direct+0x1c4/0x290 [ 1662.754206] ? splice_direct_to_actor+0x980/0x980 [ 1662.754750] ? selinux_file_permission+0x92/0x520 [ 1662.755311] ? security_file_permission+0x24e/0x570 [ 1662.755878] vfs_copy_file_range+0x4f8/0x1290 [ 1662.756402] ? generic_file_rw_checks+0x240/0x240 [ 1662.756937] ? __fget_files+0x296/0x4c0 [ 1662.757418] __do_sys_copy_file_range+0x193/0x420 [ 1662.757961] ? vfs_copy_file_range+0x1290/0x1290 [ 1662.758505] ? ksys_write+0x1a9/0x260 [ 1662.758933] ? __ia32_sys_read+0xb0/0xb0 [ 1662.759410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.759992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.760584] do_syscall_64+0x33/0x40 [ 1662.760996] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1662.761557] RIP: 0033:0x7fcbfd904b19 [ 1662.761980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.764028] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1662.764866] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1662.765635] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1662.766447] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1662.767242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.768003] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:38:37 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd_index, 0x0, 0x7c8000000, 0x40, 0x18, 0x0, {0x3}}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x40, &(0x7f0000000080), 0x4) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f0000000080)="d7480f35df2e922f24336c4cfec43f50b57e0b241433bcb7280e8660bbf95fd3d8ed892406e87303709fccfd99ce0c6934a39b07d30998a6be9af263f2c14168e56116cd63c7481a67345547db5f0bf6be8b8cb0b5f688ef4b04056219b8c7bb5acae6ffc33280247fcd", 0x6a, 0x2040, 0x1}, 0xb35d) fork() 23:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) 23:38:37 executing program 7: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x20, 0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f00000014c0)=[{&(0x7f0000000140)="01e1be7c191cb238910e0e931840d235d15f55d0c6b5f237ca6ff15d0c24e932b13181ea454064caa03601412c57c809b271a62aca7b806fe3ec35fbede4b653adf04b8c1c2404c4d5a05652e90336435f77649d79a8a976c56dea58e10fd19208fcfd0a839f30d5548cfacbcc11edcff7d71543aa2a7c887300a4e8db", 0x7d, 0x9}, {&(0x7f00000001c0)="fa6d5eb07ce74f1435e2785758c5e680e65c25ca707e50eca88b28905f5d79e73d310c064df51ae0e5617554da501c3f2e4c6c599c214aa3e43c86c9dcd92f43507149a23ba7afc68b02d013cb893d0268595ddf18efe19d98dd64bbb90e0b741e76dd0b65160f09347779a40278ffb24a", 0x71, 0xf8}, {&(0x7f00000015c0)="f7690fe23ddd5bb0ac38fb16a1a9ee3f3c95f678e417f29411f60f9348ac8b716c3fb0cfa6c1d8b779b1c2146e6872131a6435280349ed0d83179d4344bafafa3dcd84da70f3a999edb14dc3d81db90d9d1c55d272f60ffb0ebb6651b19c1ae2c5be33ef608763340e7a156396ebf0e4710fe6ad5efeae2fbc15848c104fef4feaee20fb4dc769fe7c0176509a382e82c620cff76eb0af582846b1ca3fca7c5c58694f9fd5b6c72865d72a6ebc40a7a64e611f38eecfd8935a59ba2ea220b69d6ea4630b94e51610540ee0ded05dc6058462ab44fa6bc6a597b4842921dddb0115bc92f3464c221f78083ddff3b070", 0xef, 0x29}, {&(0x7f0000000340)="a11df0ab7a70c157d32b0f3d4020663039e7fae1befa4528bf464ced11c57cd031f28f5cce485754d74a5bd33087aeb83b383c42dfe2b06efa7af14dc845cb7a94ba76527f65e74f243105856e8fcd14eb752c0e04c2c361d5f688e3a35e276c2f2161bbb78354551f9bcc1a367285ab881d09a1d4a723e66d79379584e8e29852d2256c86394cc89c21655c542711289fe531fe41db54190260f514", 0xffffffffffffff84, 0x2}, {&(0x7f00000000c0)="77ef5a06eee51ecd523df3fb338550ae7a30b501832af4c1f5e3f849487c3512bdb9393f4f49a4a458e4be68c424648e2606cb1c", 0x34, 0x30000}, {&(0x7f0000000400)="5916b53dea0788a5580633c2c21c3e68c976227e04985f03553359daa3", 0x1d, 0x7fffffff}, {&(0x7f0000000440)="887ed80141150646a463a9a76ae5c55b5523cd27056059804eb29c92841c2c62de82af8923251d5515ee", 0x2a, 0x9}, {&(0x7f0000000480)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000001480)="251d559b071652f0d81d08cd9e06ed541e2a03ad3b8ce45ef391730f83aa08e02d60948133d198add40deb1615f5fee8077a51abdc3f", 0x36, 0xffffffffffff8000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64656c616c6c6f632c002446a730e9d31c254eef7fe18895fcd3d2e2bed8cda3d2e0bbbff16a095aa510a1871e8bec25801d1bfc8d"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff000}}, './file0\x00'}) [ 1670.473740] Bluetooth: hci3: command 0x0406 tx timeout [ 1675.298792] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:38:49 executing program 7: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0xffffffffffffffff, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)={0x3, 0x0, @auto=[0x2e, 0x3d, 0x3e, 0x3b, 0x40, 0x34, 0x38, 0x3f, 0x13]}, 0x11, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000680)='wchan\x00', r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000006c0)='syzkaller\x00', &(0x7f0000000700)=@secondary) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0xfffffffffffffff9, 0x0) add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="2fcc60b26251ed6275688237d505ab76a339a9062f6fe96ba297e3875bb323175438db128faece39d991ed85bd5fbd68ae72170de7c810623162ddab4ea2564a723170618d850f9a9d1f2bd54b9a0fe2e02f39", 0x53, r1) r5 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r1) keyctl$describe(0x6, r5, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2208, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:38:49 executing program 6: r0 = syz_io_uring_setup(0x523d, &(0x7f0000000240)={0x0, 0xac5a, 0x0, 0x0, 0x3a2}, &(0x7f0000955000/0x1000)=nil, &(0x7f0000a55000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x2, 0x1f012, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x439e, &(0x7f0000000080)={0x0, 0x2342, 0x2, 0x3, 0x2d3, 0x0, r0}, &(0x7f00000cd000/0x1000)=nil, &(0x7f0000954000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0xf10, 0x6}) fork() 23:38:49 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, '#\\[%.!^%^\\['}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}], 0xa, "04bcee04e8c843a926c4640cbc306220464cd8f51ada799df4359c99d20fc679dfe88edfd0250e213de55ff89b764add4e50526fb64952859ece2bb1ffde8a3daf794a03b9d155a298b57c6c8d43bff221e73585cb45b522eb0fce74e74cfd1e8bb3a058bf12af9c"}, 0xa6) fork() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) fchdir(r1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) 23:38:49 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:49 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 7) 23:38:49 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:38:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 7) 23:38:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) setgid(0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r4, &(0x7f0000000bc0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000b80)={0x77359400}, 0x1, 0x1}, 0x6) sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1f}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000180)="9bcd4d743ca193bcc5bcd71f9f4ea6e3c8d2a0e218e33af63fcfee6ff85eb382b0f3c337498e8518469277e000a0a580047744db2ab98dd7a5cc3cc7fbe71bb124b023b702974e94095fa9602f0acbbbae245c52c0ded3ac9ad2df13e544c69438c4fb041927d60b8b93efca057769d4de8692674045e555d278242fa9ab310bd42b2e1e86b8a56d0fb550f29d73745641c4b7d4e547ec345822336a694857b7c76e30038a71394c4e1b29f5aa14723ac2c90a6f42aed938ea34709a", 0xbc}, {&(0x7f0000000240)="e95a695fba10934ae8a75dd802a54f49e9d09f9c495345b8aaf751993d068a7f8122de4c2221eaf2249d56f39723bc95ded2b4c6dc82", 0x36}, {&(0x7f0000000280)="b7ab421d90879fa1e431033d999d7d18457636d3415e654843650403366cb72800fed0d78adfa03a54445d8647f71000177a1398b0a204b82b382d80cfacaba6f87ee936e08b44d80e8bd77717cba2f0a0936438", 0x54}, {&(0x7f0000000300)="7b0bb0", 0x3}, {&(0x7f0000000340)="278004b68a14ab332d70", 0xa}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="495924c4c49ee445c08eaab4fada1038146edd0cc9af57710affd5e4f38c83b44e51e8d167746f0323731e296e34c7cc39ceb851035d516f59ac1d0e3e946a4dfa962199a2f343ce9cc79506ae0bf77e939901980bcf0971ef5e5dfdf7eb16ad19f392be374e26f8e897c01c327cd485991040d0dff42a8370395d3eac5a1aa55b3878d620959a90be7b4e4dc8650b1e5906317dd73837b492697ad2f1b4", 0x9e}, {&(0x7f0000000540)="ded945887cd309ed56265e29b7ad6cdeb2180651980137113ff0600ca2436429f65f13e84cc6867f8b94bb42fffd94d924610a4531bc2d4459fc79405da815a3e21bbe66e1f5debd062ef4d4038ed2c06464ea20baecb1213ff2c7cdd1adefe6cf50caa1e0586f0a138bed122ceb0d044d5c5b317cc7e544916634939b14657d72f42503daaf6eec1d988686f745afed7cd1", 0x92}, {&(0x7f0000000600)="1b67810caafeb5b30cd6571146cf1da64df102", 0x13}, {&(0x7f0000000640)="1b411076fd", 0x5}], 0xa, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0xa78b}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x2e, 0xe, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x99, [0x2, 0x7fff]}}, @jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x4, [0x7, 0x1, 0x6, 0x2, 0x5, 0x2, 0x800]}}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x2c, 0xb, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x80, [0x1, 0x1]}}, @generic={0x24, 0x3d, "ae02591d8c8156eb5efa5f4521b3220f711b74677e18357a840623b46d96bb0738505e21d8914393ea2452a77f020b0120064101d6657224ba4dd46d67"}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x16, 0x7, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x28, {0x1, 0x8, 0x94, 0x2, [0x6, 0x2df1, 0x401, 0x1]}}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x80}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x40, 0x2, [0x2, 0x80, 0x7, 0x8, 0xb66f, 0x2, 0x2]}}, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2d}}, @rthdr={{0x98, 0x29, 0x39, {0x2e, 0x10, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @remote, @mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x5}]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x29, 0x1f, '\x00', [@generic={0x81, 0xc4, "a382db192ba17935cf452b14eaf7e7928b57bcb5a5a8fbf8985d01643dba39f3fe0d9e6d05829695dc4940fe6b3e9786c492052a95b4e1a13087a2049c038d7ad954c4eb21ffca34b0090ac458c3479b4162563d29aa572f8020aeb6af50a93a53b78868b7443f349c85d793f2e4a72b7c7af9928aac49ef39f809b8aad5d5287d9724d5be9a31b23246df08309e13c7ffef4710ec790f4053f08790011f8974ea3004bb8d1b992afbad0f7cd71f23db5e4e0908c20e20f224d0ede84791ef6145c17a06"}, @hao={0xc9, 0x10, @local}, @generic={0x80, 0x13, "b40b1b7fa924cb790f843ef392b82696958bd6"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x3f, 0x8, [0x5]}}]}}}], 0x3c8}, 0x0) [ 1675.335942] FAULT_INJECTION: forcing a failure. [ 1675.335942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1675.336212] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1675.338891] CPU: 1 PID: 23985 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1675.341267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.342980] Call Trace: [ 1675.343507] dump_stack+0x107/0x167 [ 1675.344259] should_fail.cold+0x5/0xa [ 1675.345019] __alloc_pages_nodemask+0x182/0x600 [ 1675.345936] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1675.347167] ? lock_downgrade+0x6d0/0x6d0 [ 1675.347987] ? lock_acquire+0x197/0x470 [ 1675.348830] alloc_pages_vma+0xbb/0x410 [ 1675.349625] shmem_alloc_page+0x10f/0x1e0 [ 1675.350487] ? shmem_init_inode+0x20/0x20 [ 1675.351335] ? percpu_counter_add_batch+0x8b/0x140 [ 1675.352339] ? __vm_enough_memory+0x184/0x360 [ 1675.353237] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1675.354355] ? shmem_unuse_inode+0xf60/0xf60 [ 1675.355256] ? avc_has_perm+0xc5/0x1b0 [ 1675.356024] ? avc_has_perm+0x108/0x1b0 [ 1675.356847] shmem_file_read_iter+0x2a6/0xbb0 [ 1675.357739] ? do_syscall_64+0x33/0x40 [ 1675.358567] ? shmem_get_link+0x440/0x440 [ 1675.359386] ? iov_iter_pipe+0xf1/0x2a0 [ 1675.360201] generic_file_splice_read+0x455/0x6d0 [ 1675.361153] ? pipe_to_user+0x170/0x170 [ 1675.361961] ? _cond_resched+0x12/0x80 [ 1675.362765] ? lockdep_init_map_type+0x2c7/0x780 [ 1675.363733] ? pipe_to_user+0x170/0x170 [ 1675.364515] do_splice_to+0x10e/0x160 [ 1675.365299] splice_direct_to_actor+0x2fe/0x980 [ 1675.365458] FAULT_INJECTION: forcing a failure. [ 1675.365458] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.366227] ? pipe_to_sendpage+0x380/0x380 [ 1675.366252] ? do_splice_to+0x160/0x160 [ 1675.366271] ? security_file_permission+0x24e/0x570 [ 1675.366303] do_splice_direct+0x1c4/0x290 [ 1675.366326] ? splice_direct_to_actor+0x980/0x980 [ 1675.366342] ? selinux_file_permission+0x92/0x520 [ 1675.366370] ? security_file_permission+0x24e/0x570 [ 1675.366406] vfs_copy_file_range+0x4f8/0x1290 [ 1675.376222] ? generic_file_rw_checks+0x240/0x240 [ 1675.377210] ? __fget_files+0x296/0x4c0 [ 1675.378044] __do_sys_copy_file_range+0x193/0x420 [ 1675.379014] ? vfs_copy_file_range+0x1290/0x1290 [ 1675.379977] ? ksys_write+0x1a9/0x260 [ 1675.380731] ? __ia32_sys_read+0xb0/0xb0 [ 1675.381560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.382622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.383683] do_syscall_64+0x33/0x40 [ 1675.384415] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1675.385463] RIP: 0033:0x7f0aae61ab19 [ 1675.386211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.389956] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1675.391484] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1675.392939] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1675.394395] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1675.395846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.397293] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1675.398807] CPU: 0 PID: 23987 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1675.400295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.401953] Call Trace: [ 1675.402532] dump_stack+0x107/0x167 [ 1675.403269] should_fail.cold+0x5/0xa [ 1675.404049] ? __memcg_kmem_charge+0x68/0x140 [ 1675.404952] ? create_object.isra.0+0x3a/0xa20 [ 1675.405878] should_failslab+0x5/0x20 [ 1675.406640] kmem_cache_alloc+0x5b/0x310 [ 1675.407472] create_object.isra.0+0x3a/0xa20 [ 1675.408348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1675.409377] kmem_cache_alloc+0x159/0x310 [ 1675.410220] ? __lockdep_reset_lock+0x180/0x180 [ 1675.411201] xas_alloc+0x336/0x440 [ 1675.411904] xas_create+0x34a/0x10d0 [ 1675.412658] ? lock_acquire+0x197/0x470 [ 1675.413456] xas_create_range+0x189/0x620 [ 1675.414343] shmem_add_to_page_cache+0x760/0x1130 [ 1675.415343] ? shmem_getattr+0x180/0x180 [ 1675.416199] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1675.417286] ? shmem_unuse_inode+0xf60/0xf60 [ 1675.418178] ? avc_has_perm+0xc5/0x1b0 [ 1675.418955] ? avc_has_perm+0x108/0x1b0 [ 1675.419788] shmem_file_read_iter+0x2a6/0xbb0 [ 1675.420753] ? do_syscall_64+0x33/0x40 [ 1675.421563] ? shmem_get_link+0x440/0x440 [ 1675.422408] ? iov_iter_pipe+0xf1/0x2a0 [ 1675.423209] generic_file_splice_read+0x455/0x6d0 [ 1675.424195] ? pipe_to_user+0x170/0x170 [ 1675.425000] ? _cond_resched+0x12/0x80 [ 1675.425833] ? lockdep_init_map_type+0x2c7/0x780 [ 1675.426812] ? pipe_to_user+0x170/0x170 [ 1675.427598] do_splice_to+0x10e/0x160 [ 1675.428383] splice_direct_to_actor+0x2fe/0x980 [ 1675.429338] ? pipe_to_sendpage+0x380/0x380 [ 1675.430258] ? do_splice_to+0x160/0x160 [ 1675.431074] ? security_file_permission+0x24e/0x570 [ 1675.432120] do_splice_direct+0x1c4/0x290 [ 1675.433038] ? splice_direct_to_actor+0x980/0x980 [ 1675.434044] ? selinux_file_permission+0x92/0x520 [ 1675.435016] ? security_file_permission+0x24e/0x570 [ 1675.436050] vfs_copy_file_range+0x4f8/0x1290 [ 1675.436944] ? generic_file_rw_checks+0x240/0x240 [ 1675.437944] ? __fget_files+0x296/0x4c0 [ 1675.438834] __do_sys_copy_file_range+0x193/0x420 [ 1675.439830] ? vfs_copy_file_range+0x1290/0x1290 [ 1675.440804] ? ksys_write+0x1a9/0x260 [ 1675.441581] ? __ia32_sys_read+0xb0/0xb0 [ 1675.442410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.443477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.444545] do_syscall_64+0x33/0x40 [ 1675.445301] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1675.446360] RIP: 0033:0x7fcbfd904b19 [ 1675.447129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.450881] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1675.452421] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1675.453871] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1675.455340] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1675.456806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.458288] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:38:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:38:49 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0xc0, 0x6, 0x9, 0x0, 0x3, 0x38104, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x9068, 0xc, 0x3, 0x1, 0x401, 0x7ff, 0x1d2, 0x0, 0x7fff}, r2, 0x4, r0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:38:49 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 8) 23:39:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() mmap$IORING_OFF_SQES(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x3000001, 0x4000010, r0, 0x10000000) 23:39:03 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:03 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x200001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x0, 0xab, 0x4, 0x0, 0x3, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xe581, 0x1}, 0x200, 0x81, 0xffffffff, 0x4, 0x54, 0x1ff, 0x4b81, 0x0, 0x7b2a, 0x0, 0xdcc}, r1, 0x7, r0, 0x4) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r3 = open(&(0x7f0000000100)='./file0\x00', 0x22040, 0x20) fcntl$setstatus(r3, 0x4, 0x44000) ptrace$getenv(0x4201, 0x0, 0x2fc, &(0x7f0000000000)) 23:39:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 8) 23:39:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x80}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 23:39:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1, r4}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, r4}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/74, 0x4a, 0x100, 0x0, 0x0) 23:39:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1689.156233] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1689.162096] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1689.164032] FAULT_INJECTION: forcing a failure. [ 1689.164032] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.165378] CPU: 0 PID: 24431 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1689.166203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.167215] Call Trace: [ 1689.167541] dump_stack+0x107/0x167 [ 1689.167991] should_fail.cold+0x5/0xa [ 1689.168444] ? xas_alloc+0x336/0x440 [ 1689.168917] should_failslab+0x5/0x20 [ 1689.169388] kmem_cache_alloc+0x5b/0x310 [ 1689.169897] ? __lockdep_reset_lock+0x180/0x180 [ 1689.170498] xas_alloc+0x336/0x440 [ 1689.170922] xas_create+0x34a/0x10d0 [ 1689.171375] ? lock_acquire+0x197/0x470 [ 1689.171875] xas_create_range+0x189/0x620 [ 1689.172390] shmem_add_to_page_cache+0x760/0x1130 [ 1689.172991] ? shmem_getattr+0x180/0x180 [ 1689.173496] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1689.174148] ? shmem_unuse_inode+0xf60/0xf60 [ 1689.174683] ? avc_has_perm+0xc5/0x1b0 [ 1689.175148] ? avc_has_perm+0x108/0x1b0 [ 1689.175629] shmem_file_read_iter+0x2a6/0xbb0 [ 1689.176181] ? do_syscall_64+0x33/0x40 [ 1689.176665] ? shmem_get_link+0x440/0x440 [ 1689.177183] ? iov_iter_pipe+0xf1/0x2a0 [ 1689.177682] generic_file_splice_read+0x455/0x6d0 [ 1689.178298] ? pipe_to_user+0x170/0x170 [ 1689.178830] ? _cond_resched+0x12/0x80 [ 1689.179330] ? lockdep_init_map_type+0x2c7/0x780 [ 1689.179918] ? pipe_to_user+0x170/0x170 [ 1689.180414] do_splice_to+0x10e/0x160 [ 1689.180905] splice_direct_to_actor+0x2fe/0x980 [ 1689.181491] ? pipe_to_sendpage+0x380/0x380 [ 1689.182039] ? do_splice_to+0x160/0x160 [ 1689.182558] ? security_file_permission+0x24e/0x570 [ 1689.183189] do_splice_direct+0x1c4/0x290 [ 1689.183696] ? splice_direct_to_actor+0x980/0x980 [ 1689.184305] ? selinux_file_permission+0x92/0x520 [ 1689.184919] ? security_file_permission+0x24e/0x570 [ 1689.185542] vfs_copy_file_range+0x4f8/0x1290 [ 1689.186105] ? generic_file_rw_checks+0x240/0x240 [ 1689.186716] ? __fget_files+0x296/0x4c0 [ 1689.187223] __do_sys_copy_file_range+0x193/0x420 [ 1689.187818] ? vfs_copy_file_range+0x1290/0x1290 [ 1689.188405] ? ksys_write+0x1a9/0x260 [ 1689.188450] FAULT_INJECTION: forcing a failure. [ 1689.188450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1689.188873] ? __ia32_sys_read+0xb0/0xb0 [ 1689.188889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.188900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.188916] do_syscall_64+0x33/0x40 [ 1689.188927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.188945] RIP: 0033:0x7fcbfd904b19 [ 1689.194568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.196842] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1689.197792] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1689.198687] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1689.199567] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1689.200451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.201348] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1689.202261] CPU: 1 PID: 24428 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1689.203675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.205340] Call Trace: [ 1689.205877] dump_stack+0x107/0x167 [ 1689.206637] should_fail.cold+0x5/0xa [ 1689.207408] __alloc_pages_nodemask+0x182/0x600 [ 1689.208346] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1689.209543] ? lock_downgrade+0x6d0/0x6d0 [ 1689.210378] ? lock_acquire+0x197/0x470 [ 1689.211198] alloc_pages_vma+0xbb/0x410 [ 1689.212019] shmem_alloc_page+0x10f/0x1e0 [ 1689.212849] ? shmem_init_inode+0x20/0x20 [ 1689.213712] ? percpu_counter_add_batch+0x8b/0x140 [ 1689.214727] ? __vm_enough_memory+0x184/0x360 [ 1689.215634] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1689.216722] ? shmem_unuse_inode+0xf60/0xf60 [ 1689.217609] ? avc_has_perm+0xc5/0x1b0 [ 1689.218390] ? avc_has_perm+0x108/0x1b0 [ 1689.219191] shmem_file_read_iter+0x2a6/0xbb0 [ 1689.220099] ? do_syscall_64+0x33/0x40 [ 1689.220891] ? shmem_get_link+0x440/0x440 [ 1689.221724] ? iov_iter_pipe+0xf1/0x2a0 [ 1689.222546] generic_file_splice_read+0x455/0x6d0 [ 1689.223526] ? pipe_to_user+0x170/0x170 [ 1689.224325] ? _cond_resched+0x12/0x80 [ 1689.225123] ? lockdep_init_map_type+0x2c7/0x780 [ 1689.226070] ? pipe_to_user+0x170/0x170 [ 1689.226886] do_splice_to+0x10e/0x160 [ 1689.227651] splice_direct_to_actor+0x2fe/0x980 [ 1689.228584] ? pipe_to_sendpage+0x380/0x380 [ 1689.229447] ? do_splice_to+0x160/0x160 [ 1689.230242] ? security_file_permission+0x24e/0x570 [ 1689.231259] do_splice_direct+0x1c4/0x290 [ 1689.232087] ? splice_direct_to_actor+0x980/0x980 [ 1689.233045] ? selinux_file_permission+0x92/0x520 [ 1689.234013] ? security_file_permission+0x24e/0x570 [ 1689.235071] vfs_copy_file_range+0x4f8/0x1290 [ 1689.235979] ? generic_file_rw_checks+0x240/0x240 [ 1689.236952] ? __fget_files+0x296/0x4c0 [ 1689.237771] __do_sys_copy_file_range+0x193/0x420 [ 1689.238754] ? vfs_copy_file_range+0x1290/0x1290 [ 1689.239700] ? ksys_write+0x1a9/0x260 [ 1689.240461] ? __ia32_sys_read+0xb0/0xb0 [ 1689.241278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.242324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.243418] do_syscall_64+0x33/0x40 [ 1689.244168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.245208] RIP: 0033:0x7f0aae61ab19 [ 1689.245954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.249631] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1689.251175] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1689.252600] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1689.254025] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1689.255458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.256884] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:39:03 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:03 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{r1, r2+10000000}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x4, 0x8f2c}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1a85, 0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r4 = getpgrp(0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2fb) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x1, 0x1, 0x35, 0xff, r4}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x5bc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x1d, 0x1, 0x70bd26, 0x25dfdbfe, {0x1c}, [@generic="3ab868fdf9daa46fc224c5943aaaa15ad4e83cddb3a18aced6e0a100299b8388f09539ea20a07351ab5f97c552"]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20002005) write$binfmt_elf64(r5, &(0x7f0000000a00)=ANY=[], 0x5bc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95, 0x0, &(0x7f0000000240)=""/43, 0x2b}, &(0x7f00000002c0)=0x40) sync() [ 1689.547310] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:39:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 9) 23:39:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 9) [ 1689.597285] FAULT_INJECTION: forcing a failure. [ 1689.597285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1689.599964] CPU: 1 PID: 24731 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1689.601346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.603016] Call Trace: [ 1689.603556] dump_stack+0x107/0x167 [ 1689.604291] should_fail.cold+0x5/0xa [ 1689.605071] __alloc_pages_nodemask+0x182/0x600 [ 1689.606037] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1689.607271] ? lock_downgrade+0x6d0/0x6d0 [ 1689.608106] ? lock_acquire+0x197/0x470 [ 1689.608927] alloc_pages_vma+0xbb/0x410 [ 1689.609732] shmem_alloc_page+0x10f/0x1e0 [ 1689.610592] ? shmem_init_inode+0x20/0x20 [ 1689.611459] ? percpu_counter_add_batch+0x8b/0x140 [ 1689.612453] ? __vm_enough_memory+0x184/0x360 [ 1689.613376] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1689.614482] ? shmem_unuse_inode+0xf60/0xf60 [ 1689.615381] shmem_file_read_iter+0x2a6/0xbb0 [ 1689.616310] ? shmem_get_link+0x440/0x440 [ 1689.617167] ? iov_iter_pipe+0xf1/0x2a0 [ 1689.617983] generic_file_splice_read+0x455/0x6d0 [ 1689.618958] ? pipe_to_user+0x170/0x170 [ 1689.619760] ? _cond_resched+0x12/0x80 [ 1689.620570] ? lockdep_init_map_type+0x2c7/0x780 [ 1689.621537] ? pipe_to_user+0x170/0x170 [ 1689.622344] do_splice_to+0x10e/0x160 [ 1689.623145] splice_direct_to_actor+0x2fe/0x980 [ 1689.624106] ? pipe_to_sendpage+0x380/0x380 [ 1689.624983] ? do_splice_to+0x160/0x160 [ 1689.625800] ? security_file_permission+0x24e/0x570 [ 1689.626830] do_splice_direct+0x1c4/0x290 [ 1689.627675] ? splice_direct_to_actor+0x980/0x980 [ 1689.628648] ? selinux_file_permission+0x92/0x520 [ 1689.629634] ? security_file_permission+0x24e/0x570 [ 1689.630680] vfs_copy_file_range+0x4f8/0x1290 [ 1689.631611] ? generic_file_rw_checks+0x240/0x240 [ 1689.632597] ? __fget_files+0x296/0x4c0 [ 1689.633423] __do_sys_copy_file_range+0x193/0x420 [ 1689.634419] ? vfs_copy_file_range+0x1290/0x1290 [ 1689.635372] ? ksys_write+0x1a9/0x260 [ 1689.636147] ? __ia32_sys_read+0xb0/0xb0 [ 1689.636970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.638025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.639078] do_syscall_64+0x33/0x40 [ 1689.639834] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.640876] RIP: 0033:0x7fcbfd904b19 [ 1689.641631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.645366] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1689.646915] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1689.648362] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1689.649807] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1689.651250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.652695] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1689.679261] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1689.695218] FAULT_INJECTION: forcing a failure. [ 1689.695218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1689.697785] CPU: 1 PID: 24849 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1689.699185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.700870] Call Trace: [ 1689.701414] dump_stack+0x107/0x167 [ 1689.702164] should_fail.cold+0x5/0xa [ 1689.702947] __alloc_pages_nodemask+0x182/0x600 [ 1689.703910] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1689.705138] ? lock_downgrade+0x6d0/0x6d0 [ 1689.705976] ? lock_acquire+0x197/0x470 [ 1689.706841] alloc_pages_vma+0xbb/0x410 [ 1689.707659] shmem_alloc_page+0x10f/0x1e0 [ 1689.708510] ? shmem_init_inode+0x20/0x20 [ 1689.709377] ? percpu_counter_add_batch+0x8b/0x140 [ 1689.710393] ? __vm_enough_memory+0x184/0x360 [ 1689.711307] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1689.712423] ? shmem_unuse_inode+0xf60/0xf60 [ 1689.713334] shmem_file_read_iter+0x2a6/0xbb0 [ 1689.714279] ? shmem_get_link+0x440/0x440 [ 1689.715141] ? iov_iter_pipe+0xf1/0x2a0 [ 1689.715943] generic_file_splice_read+0x455/0x6d0 [ 1689.716913] ? pipe_to_user+0x170/0x170 [ 1689.717703] ? _cond_resched+0x12/0x80 [ 1689.718517] ? lockdep_init_map_type+0x2c7/0x780 [ 1689.719476] ? pipe_to_user+0x170/0x170 [ 1689.720276] do_splice_to+0x10e/0x160 [ 1689.721048] splice_direct_to_actor+0x2fe/0x980 [ 1689.721988] ? pipe_to_sendpage+0x380/0x380 [ 1689.722872] ? do_splice_to+0x160/0x160 [ 1689.723673] ? security_file_permission+0x24e/0x570 [ 1689.724685] do_splice_direct+0x1c4/0x290 [ 1689.725518] ? splice_direct_to_actor+0x980/0x980 [ 1689.726486] ? selinux_file_permission+0x92/0x520 [ 1689.727465] ? security_file_permission+0x24e/0x570 [ 1689.728482] vfs_copy_file_range+0x4f8/0x1290 [ 1689.729400] ? generic_file_rw_checks+0x240/0x240 [ 1689.730389] ? __fget_files+0x296/0x4c0 [ 1689.731224] __do_sys_copy_file_range+0x193/0x420 [ 1689.732202] ? vfs_copy_file_range+0x1290/0x1290 [ 1689.733151] ? ksys_write+0x1a9/0x260 [ 1689.733914] ? __ia32_sys_read+0xb0/0xb0 [ 1689.734741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.735789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.736831] do_syscall_64+0x33/0x40 [ 1689.737574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.738611] RIP: 0033:0x7f0aae61ab19 [ 1689.739357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.743048] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1689.744591] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1689.746017] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1689.747461] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1689.748905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.750382] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:39:18 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x878a, "d71ab0", 0x2, 0x9}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000080)=""/39, 0x27, 0x7fffffff, 0x4}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000180)) setgid(0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0xfffffffffffffff9, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0xfffffffffffffff9, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r1, 0x0) r5 = getgid() keyctl$chown(0x4, r1, 0xee01, r5) 23:39:18 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 10) 23:39:18 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:18 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 10) 23:39:18 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f08"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x9, 0x3, 0x20, 0x0, 0x5, 0x1002, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x18401, 0x3f, 0x80000001, 0x5, 0x7f, 0x80000000, 0x7, 0x0, 0x441, 0x0, 0x8672}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) [ 1704.486212] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.7'. sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x2eb8, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x36}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2fc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xb8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x200}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x9c, 0x8, {0x0, 0x8, "9193b270be6d88b846600936648862124e68ee54d9c20e0ad47aa709ff6498237245e1881010b5935017f00248c3bd6b2644a19b434146a996e23ead36e4838668eb6aba3ccdbdd5c71f5b5c69c324c7c5b3780248beaab8c93b6982b4cd0d537e8d62f97d05904e1a0e610045f09f086476a25ddc8c43ad9da2222474f81f67bedfef0a8c732c44e94f2b53c72d362f"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7fff}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x80, 0xa, "f1101f90bf0666e267c065ebb9dc9fcc172f172c471366797dc8b154e5c538dae0721434e3476f61e742b196fda2bfe9b12815b1bfc1e74b4e0802b6f06f39c2226ec06cff296cf295a6aa22ba1f2d21114136d7428a3803a9c04c6105727b3f3120ac3d4cfe8d70f6f9d5afa7eeef3532b94978f0ba19131f011495"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x59, 0xb, "758985ba04beca4d931f41f9b69d3b717c43d88f6af98e96dcffdb681367ed783f72c5f485bceb921ae1a88bb3cc73ed21588e1420e43bb60fe5005321d9b8dfb78d7e5e7ba1fb1b3a1abebae0bf25ac20dffc65ae"}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x154, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x3f, 0x6, "b2aca911810453f4c620dc8b54e71bae270d680f9ed0be3189c1686eb25af86303d3cde98e280b745c82c0d44ea03ee1b6d36a2871736640c0d9d3"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x102, 0x8, {0x3ff, 0x1, "586000a9981cf08ef964ac1012be1c680dc8c8ea0d71863c9c8c63ca2218dac865b8b07bea4bcebceda8ad18fb41ffe44cab3ebdf3c1804235775d3d9998d9d1238751411fe769d097920c64722a2b484167a2477904484baec0ca0dd8055b1031c35022ff3cee7b1963909c7b8925c2798671e4057b2e537b56a60ab7552f7e998d780767ede5035787382da9ffa39aefebbd03d875836adc7c0e3815781ef0d5cdc8e3b74350b1f1a35d290c2bf0ae0fd1d0c26e70de4b22a950e227e0e4f61bacee9dc31f363211fcebbe90c283f6a4aaaf4484714bd52dc216d207f0347932a91cdcad3010264b76f121897aecd1dbe3afa084d2"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2b24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2b20, 0x4, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x8f, 0x1, "5470c55320d5479c14fe60111f4227e0d341d2d9020b48be2b800cdfe6cce1a9c19a7b0ad423d0106e7ee7fbdc8318c36ed5200893a8aef425efee7e9e09fe67c45654cab03ff97a4f150927ce082b19cb5c2ac30932f90ed30f8ef6cb4af4e5bfe36b3b17e80bf836469d4445ef9a98b21addbeb98b7fff6657185aa1fad8bf99b4a439e390c87e310259"}, @NL80211_PKTPAT_MASK={0x7a, 0x1, "4c50663e83ef9c104cab214eadd3661e5841c80ab5af6dabbd2c6dea65ac0c413fb2486db61c38e6be27bc4d09839967dd36e52ab8cee77dd9716a0eaa701d9c65dc005ff512fecce2ecf1879b0c62fc933aaf6ea2ec710c5ca338a6b19b095cc164cfbb8b1682b16e8e52ce3761f4c577f75bb4ebab"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}, @NL80211_PKTPAT_MASK={0xaa, 0x1, "05ce9ebfc97fd29d2043d6149fc2903353338702cdb4356c208b786ee532459636502e58bbc04423ef7df1d7089b85749c35f0e1e4d6fe09a7ffe047e2c314ec0a8c0d31713597d015263de367609696c430ebe9575b83fa6fd00ab12828c09624f478468191f12e588c739a1ff330e8bd98fe30e97d294b19de801d74d1769d2cf05b2ea1e8fa2c6c987a949b14fe4efd7416a8bb5311fdf5655a47bde16e464be935e3eee7"}, @NL80211_PKTPAT_MASK={0x71, 0x1, "05c4c35c26ef3beda555da828b0154c23a3cb2f0fb917d7d0c59f96773f612e947dcdc044a134400ddc65563ef1a3fe4eba11200167d384c524877815d77cd9fb0f265dbf8aa9253856d7b26ffb8e4ad2a6cb0d66955971f90352d3a0b48abc7535c25d5790cbfd239fc29ef7a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x32d}]}, {0x3ac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd5, 0x1, "5867781c33df2c27cde73a2f9541af0d654a16e9e818c57e8a5e18c53467b80ab10008ed1f51b45d77a356f816e672a854c1443dcbd0233d2dbc0a4b15864bf9d004a2dc732205aab59c2eac7c2dc7a1250dac867ccff37b900f70334bcdb4caf0ec41f983fca91313f8c9c23e9dce0d0c220d030d730547f7bcd9d1965fa6ed677d92867928dd820988aaef7c269143c3c37e07958f9f2e9a1c3fa58ea6cb043021feea240f957e18dec0477827cbcc781597be654f8a99bb81485c07efa15080abd4aaa637b7f484c39d2a150d660e9d"}, @NL80211_PKTPAT_PATTERN={0x93, 0x2, "f1148ddcefc9d7e23a985443c7022d3aa64bd77124ab26496e23a25bf9b159d4088beb0e082455ded8aa8eb180e61a8544a142ce0a2d8bd5cb540ad5076f01168d1c935f318a492c5ad23ae6b0796ba38c41c3d996f497265e0f809ec8b69f23527dbb796b98d876a6fc8749460a80058f5eb834783148cce12f2033fa9733662999328e05b517b23c3d5afe8d6b53"}, @NL80211_PKTPAT_PATTERN={0xbb, 0x2, "160fe2a0d57dfa736bb9937a283a35ad2a9e3464d13d0df65a68f700b7c7c78bf9bf1f3c115bf5d8080b190bda95fc440e6f5779005bc2aef113b8eb47799d5d1a5f1d6931217c2d8b0c09c2ebb05954e28d2519c9ed2b3f7ab860878f21dc9019e95de89c69e1b7988da78d8596810a2fdad1c3358cfda577a47b117c16e29f2a068ad23629d1c0d35c27a21941ea5a6c87024db936e65cd677ae38f8a62bf2f4c567deef28c7fdd22e9206a2190f6eba1ff0b0c4fe9c"}, @NL80211_PKTPAT_MASK={0x91, 0x1, "d5770c5cf7fa02c328d20541ae99de98896ea0e950bcfcd81c407001b2c813cc4a3060a68311f8fbd934bc1ab418eb9d041703c2e61a2448a73d66dac35b3410d4612347642418865443e7a630d1585a3b56251ece1994a1dd6a19c420160b1e7f334b939d478825167ad9c77da524bcc213dc1144b8ef40b43869fa0eb5cfa808427872d6117c87ace23f7ee4"}, @NL80211_PKTPAT_PATTERN={0xec, 0x2, "2ace2a0e55731a0029351f1dbab47397f2b19b323cd6f038b37f00584468f272efc0d6c4652eef5ae0760fb1163085fd31c01d9486b393933417d2152ebcbb7146f50bbbf43413f6cf69db3f80d988638137547b6250f54cab60116aba410232e19615e78ac3d26d348a2316ca4044257b212e8d727bd0eaca1bce92cb6ac541e43f31925607efd4327c54e4b60aae19c732bfdf9e3315f1cad6bb54feda5354b5845cbc87ac5a1ad69ff8ba2d6b0e458e98b26e2f1eaeac68f15178c77006ec6c73bff6536c04bd534abd131c34d14abc452d29143fa520b8e87293c697eacb240a43440f6f5d85"}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe1, 0x1, "25e71074aecf9d61374f01360ef78f25124fd6853a4e924ce1b2daec6fc2f70d6fff8b4fe686b9bdb04857ef619d3626156d6f49cd4aa1aa80b81f0bf3eb310efce8205b06f865fa82ea461275946d883a1ef0486284a6ed021a8fcb19d5d1635e3cdc71619f02d92bc6efd92e6bf0a7511d698e8f6f050ce8a18b96d11c1c3e7eb2506b7b6afadc18a8ac4c4a74ff4ce463196f21478e452d4ba8ad09ef486e1268bb28c7c330591f6e26a0641aa1ca807816848feb69790fb4fa29cc481a1c624be44ea92d4969a69bd43cdac9657e49766dcb473b89e52ede4e3f7c"}]}, {0x11c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x6f, 0x2, "ec29569c8ad5bb9b7841054555b0a7d381fb3fdef6f8904f35033e1d442b773971b8aa08f4f4fd2a3e026e8e4eda8993f8954823635a555cb43d98a31a6de17f64a53ced30118d9111a110ddf569aba6d0c8cec78a3bf53a7eae3b83ea2295c847cf3c7a32e7052feafe3d"}, @NL80211_PKTPAT_PATTERN={0x1f, 0x2, "c92af3898be76a7e04c1cbd387e0693536fed23bb344a4fc71b4af"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xa4, 0x1, "95d87b455612b310c2418596c70f8fe63fad160952430f9584a27587e1355814aacb19473fc2f4d042bb2d40717740b035fdea2a5e79df63a87e1cbbbded8406300480b0abf65db46c81bb2a42161008cefb4690657348475457c3335bff0db3e5ea98b4a69ff8c578ba4eab9ad6798c0398ce2bfee3462625af6d379e94f75d03c658c956d1cdd531fe435a005787bd3335b7149f3374c581640bd19f698bb5"}, @NL80211_PKTPAT_MASK={0x7f, 0x1, "cb219278e4b3397532ba05d26240109631451d66f0e7aab9765e2fa7841073619428ce7880656231502fabd2aa329c2742a5a8a2d0d5c0cdd8ec063329edc8f9594c6e6ec09567f370892e56d473cdd66381ca5a796fac7ff3a9a9488d32ec9e9bb5c31e2941ee506c4be655b343f1ca92e06126accc5d502851a2"}, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7abf60019e"}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x12, 0x1, "eb65d21e3b311805417c59529f8a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "ad066e8e7fe8603806515a2d1afc086069c08e4f365b3ed378e056b6291cc966e9790609bcc9006e5f9689641c61a99a33b922ddf58309a109cafe919f58fd73d6d5cf411663"}, @NL80211_PKTPAT_MASK={0xfb, 0x1, "c5378569ef1246bddaa7f7032835f5e76c4c809e4961ecd83c51c63e79b98bd413c4123d56d78eb8769734c4fcc8de0f90e26d2ddb08b1a04365fd71ad7e692073f6bb316efb18bd1ef19ec351fd955fb93a17370f81f6ab4fe2e1e5017d53321840b2c3ebe2bca54ffd2fed651ce88f8d3c573177e5f1043728de414337de73b42fbbf426b2848a8ab92715db8867fa370cfc4a55c03c2e14b93c277f853c1da4119c6a5424ce5ee5de5d744d2f64bee0ef23ab22da770716c6ec5518d0981319b529048b0419229e422ae6cfce61ea135aa91f69bb049de4bafdb35a5a15afcad4e7e3ad283cfbdafe852dafd10ec915525f94c49232"}, @NL80211_PKTPAT_PATTERN={0x61, 0x2, "c6b78298d05c7d2382cc2df582e59c81c1da74009432ccf955858e042ffeba368335029a52371952ef00e49eb40b15e914900461165ce06854bbd5df9b46a2fb9b5cd66c94a9c5f731d97f75756341cbadd6f1dda72c72460e2e8c82a0"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_PATTERN={0x16, 0x2, "fdc1cde25bc5983bf285ed1e131503fc79ed"}, @NL80211_PKTPAT_PATTERN={0x14, 0x2, "d65eedbde4db42ea46852c06a15fa6a5"}, @NL80211_PKTPAT_PATTERN={0x6a, 0x2, "27c2dac630335cf8ea9c5540e63d4026381dba967b8328fdbce779ada6d36871dd21fb31dfb038d6e3f9af57688a37b1dd0f7813bcd9e516970620055fff0add487dceab02ff69d6b32d1e893bb6057ddc14960a18a31bff52e69151b771c34fa30f372860ad"}]}, {0x1018, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe79}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3f}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "56bbebeddbeef47009f49b8d88a4bce94202779a8d395e1e64b8209359f9bdae9e226bac7279ac660bb190998a32b159e83d506cfa2dfc2e6a077f9bc773efe256cde2052fa59b2862101c848ccb093379a37edf8ad8d36d954afdaa08ea39139421d57e2410064aff5b6aed92b5f0851f3160e7b21f67415beabfe4f38b8aea2a784fdd10c5dc255d9170613f7ff9b8cef6aef580fb0f7afd754fa72ec90a785c69297a101992ee599654549ac74a2e0e9d9ef3cb893c93c0bcae96cf13b03c9b1a284e7679d4351bf33090cc0859652915445e1a27559638005a3e1942aac354cb9a858f03366253db1774716d1c07bd216bf0c386b73f6a1bc7d9966cf3c2d7843b7062df588cfe26a20e9db3af8d403d8ab94ec5014f19285e5691258977e7f65cd1b03c043205486548d054d3bb33cbd13cba3c8fffc59f7622cc8c74505b0e9a17247cc5cd8be82b0167f46872c7f24fa3e0a3a62f5a2f0a710a1acf383234d901148c7325a4ae9decaaed89ed1ea90ae90e29711da7dfc3bea967948cccc12cfb44898cfbea21e1f1be7200ff4e6c43fdb401a28352d0d77f8fcc02990f788ca05ca10fbc2e469162a4f097edd42102656d9606b0026f9a50cd88b3b8912e71aec92a76fa789cfe99dd5540b7defac1ceb6a51c3337811af26b93388cc221ffe0b35a0d92d75e3978f9afbd2deb528881ff3caa0acbc4b9396fa34dcd409405649f1aee42761cf9d751aa29cca7ed1c4191683f5797dc6f1fdd49b5aef616f0b7d8d801b854970572ec9b3e2d92e748436301f375f654eb757ff9b480d9f42a99130a83fea4c5bedbffc876a273fcd86556fc51e7e4966dbc12b20abf2eb3e02a91d413af24f5bc9216c604123ba9cf673a72aad8dec442f7e6679c27108a557d63bb907dce37794ef15bc17dc91c2e262940b7f70369bca964ae5557cd307272a24f2a05946e55634a99007b3d8d5716782f0ea4062bf09a4ddd032b0ea99f267573e0050b6c5d2c05bd0dd2e9f21624cd316bd2e43880f12468406a2f2ed8d29493cb79c4a8e25a72644c078370167fdcc3d40b07270567420328199615cc989b912a04a11f185301bad25b6ade87d0eedcaeaefe25b2c8ea02e7c4e7d03b92bb659d5a4bc76c3c2736aedfc33b740adf2e6f39b9afd61fb4975f92f82c6dd746996447500dc85ce39c0071a244e4ee20ca49ed196c9e5547f38b4d27ae6d3a45ae894f0e86a50b70c1404afcb86d2ff093242dd8824c4db89f3dec08987a7fa43fa5b020440c134bb923cff2e2c710baf2ba561d445a46da65ab1c8c633353a3ee0d43e02e6b239dcd201c4a1cd45215497f84349ee05f7e1ad132b0178f6ba3ec55b353a4189b87d6ca22d51893ad50e79088e5cf2b06949a49da9416ed5aae5a2c55f3c62a3e6425688ed6722b8cd437161d4a9c27722774fe5c800f107321eb7f02519989a957d9f0fd3b987a392ea1422c743b6fe6dbb472648adc8c51fa65d6274afcbe901e2bb9c6bfa99ef237d799d4db66bad8d060c27001c31c2865ecc04697f227cfce72c54be480ae6d14f1a32f0c0a47380030694006a7a984080e0dc0091243f0ff70c0323b43f0fea28406202c7ea6825426703760ec704507f24c79c4def439e9f6ccd0d351dbde8197b49c050bb98c0d003afdc41d7bda1a3df05f1bdb1f5a0e50081e1964c98a50f5d6f1d94dea7ed6a78d4fcf2a47662729f8a37af130f626822c0cdc7f7ecade4ec43377969bfe0223fddbac2a96f668e0645ec05e1d1c61551713f6c33d179a65512fbfb06f8fedb97c35bf49e4cedcfe3cab8c9fff720b27f03be9d72589a32f90862e4233d7865b05ffa6dabff0ac0fa74d99d16775a4e9865b56a0015a826637bb5fcbeee3f85e95e9f4987b338503515d7dbec12d3d1d6746e11842f8ec3af8c86d9c5a6ad3f78c5c60b11849ff3ff6444f255d48f2d28cd41f8d789760b7bd0be6bcdb2ef2e634a70377d5ab6340de52e898bacdb802053473d5f75073772b05289bfda8d14988c5fd41292277e5df05a9ce689c280d72dc41a80b9ba5642b0acbb930664d9a9e30cd869f0e39d945e5787f595b3f17f289073d5a38fa4b56d125c73fe895646f35a457ff220984fee57784a9e7b726f3f0bd733a50e8233682a31aa4f8820c72a3772a16e105a8a9325d2ad40c5c0ed5c751949bfa175c8371496cff7e8cdd5aa0527843c876f8e2e32b46ddbbae517dda1839880fd73d978c1dc4d8fb0feec31b7244fbafb4afbb2b81890a520860ed6c5b1f254f6a9c219bfaa431e8a13b79e855f28b64e46b3d4961f745b243c4f4c7f5dbea47eb416c6a7fbe0b39fc643616b0abdf73fc37de0808a54df95aacadf450a1690d83fc14bab9a3718b2e7b7207f790fe5d3d34bdc2f8506bcc1b96946d45abae3d131b15eb0ff10669cd924e7884eb2d14aab225341d0faa30d70dccd973bd85429340fa71631e01ad82af4e52767882622a46c41baf1a0128de62344386803580babd2003f13110b7e7f223b80e394e558dd982525dc275b3498b2b8b0841b466d6dc9a837f48a9aab4ea5da5f298fac2230f00fd627a622501b9ea3720d14322173b2b5a79c644e0deac2c2a05ae2ff0f03c9b57eb3ae13a502701badeaf5b961506de7adbf018f70b8595acb540ed024da747ad3bf9173d10917763bf7a7b2e9374f26b8c94cecc0d48c39ba1b5cb9756938f053be734b02383c08cb7b10561d934f23ed4f6884558ef95a18cccd5ef10d45a91797ad0aea896c1541f3a89ea9735fd2b5e52ba3ec3a7f3f51e5ef5ad7d095f64106d39f83b59666d06fc828dcc68be0bf1f93e9d170bb5d0504969e9827192e30a1decbab088e4c1286ec9f6d9554cecb6acc3d27267273184b0a2ac6599c3cad25ace39c459cf65601ad5f3b9b8e34e0b8e29c24de7bbf812a850ed401bc11202d8a4e8c1a67365e24cd1f40d7ae026c5a263f88a70ef8f8e1ff34ca71520a3de23aefc06d29cea9e3ffe171427be3f7290336346c3cb79e4f591613fbe383ca5b0fd7505e14de740513b045ed01891193a77a31b6b32c9db0343f22676581db1694f7c1d8b22dbd429c5a2d4ed1facc914e2439ee69e33d0b360ba10945f73c7de4891a6455cf1c1b11b3f8b32705436ab6372e9217e1646aa9e6d56d47f5e22a405fd02b86fe8d009a5e1eee974df231ca7365d72701619e56f7fc4ab70c6b03ef29849c4000672ba56ece5972c4b877ba81a36238fdb5227cb062b9717453d2178de6906d56ddd32edb6c77a84d3bcd8c39bcb13d253508e2f7fa6deed015eb6bf00d01ac12fb697ebe32e3a8d24310386269810f9eade65affb3bd2958f40c6ca425bbfb3760fc39fae0ac81912d4efda95ee298aab23ec958cf196791b02e7447cef724ed3ba995c673dd941b8854e5ab25f62873f803b135f145fce7b0b7c5f785d05a2529b1f255a2d52d1d1e4f64a2e284ab5278a041ab5de70450be7aa4e336aa0a17de32c4976c1ef0f3b64e0d554163cf21232aeb469e6d3dfab4e4de9730461843d91c1d932e248400bf3f1701246c653109d9ca1fb747eeeb0c657cdcab91dfe28c81e4648b3b7e944bc38844b88df658cd247a967c14029a5c5572951b0f877ae16db11623b28c27698f7603c865cfbf4ccd3e06abf27df9540f5d1fef53181d84fd31bfbe864eadffa9c53d60c85eb11781f806d55c01d97421dbe36ae7cd22258a75c885188bf4c3c03983ca983f13726b1700547cd92eb6ca2299fefbd8eebc5f8e04f45d4e485aa2baa9263aa6a617c0a879c83ffeb44912a371c59d3c86a8c513021d9f585941d6e75eae94d9530728e6bcd704df6b0f592f25001c5345367881c2edc9cafb89b1a0e95f635198673748d8934fa2cb4eb6255db35642433636db3123aff65f9e5c6f104df362b6041d5b3ffa93a66f175436e8e9e69a2283a623f75e9942ab8c4a99b6cb05850cfdb29d957dc132ab02305ca2b90e5d1263eee8635993295605128ca13722e0fbd59b5486837ba87e51b9df563f4f545ccfe71b4cf54340702b2e72c2e7066489abdbe52e0a7592b9a1ded359c9a0c8c5dcbce0c6605810ca412eb37f4593e58244924ad881f69cdfc6eb4e202437ff1ce6a14673880cca14fc42f3ef4b3c110df79f578862e32d6423b692c7aad24d920f867edb5d710231d481851cf2d52bda6d03b4d6bf46f85c65ae8b0d0a99cc3a4f4123c75958a5fca9fd027e17a8b715740fd150dc555b8b19fe096fe074509d41fcfdcca6276b3b2034614b43ebda3a46e77ccc871097b7075453f4f0a8189c67f6730e1527a0c4ae8bf7197d853902c2c55181de62f9f116212dc060c51d634fc259f9b46ec4f8f90f95ae16883f703d5f2576c0879dde4ad3a9cce74f76ca07f32e72ab177c67bd68bb03b294806e3689f6d284d42e4cd597fb1e54c6f8e10b903070697909de7d3a238be7c00995ea47436cea72e27d2fc3c3ce8ecd1ec6eff5a86e8b1e2df65f3cef1695e3e73bda24a7f27605f61e144952e3326349960b295f160eb1811d0df8e3f39009836524079d44376f5a7663a064eff4c0074164d2cc39ef3b3bbc1caf3255a539ad4e956641784432876cc6dc970169f09773750204c5ae2a9da63dd4a72faa872a685dea76c5fca4eba44dc3a636d8706272ff69f99a6bef79d99dfeb2f289c9fb2fb55ea34a12e482b01dcdb10735d0ca7f8b44983f5ba96e73b2c71a7d23c26d749a889aed39573a03bf1e6d490458cb65b718905916c6d72c3aa9f3e7b059f57ad763332906417693cbe45194ea4cb704046a71557bc77fba876f5eb623e9d3f6a3a925be419c241c0ed9dcec9a34d27d74c2aa9d0003d8e78fac74faf17fc8e452448c3bea339c7fa02e931e55ea30a712e5619d35b676113c970c49e996fcf571f047698b916b22fbd152bda468df502214cdfdac4829aba5172fba83da524bd3bfab5e307c1af2a76acf569da44693efdbd9d9850e4773afbabbd24d8b0e8f12cc9a77a8cb8ec16cd0ac51f1f82939eeccc5d4370ed6b025d2d0a91c045acf76a430a8d1543bdf88190bbd9c56044a60e9260c92b8e13cad203bc8afece64e7f5c956484b7347871bc26fae1746faf7198454114a4825a481069a134de83125d33e52779be7dee809eaef49fd8e66d715a614850b716151fb2fdcf1a135f79d965ec5fb865c895eba53fbf8b415d13b90d92ea1d06852d2b9487e364c9b50fccaa497b249de213cb29795c4a6839d0d780b73743569b49e86b3245b2e648673119c7f67164035bb927b56100e2880885b260a0e2857fe85d2f6d3a7dadfeb9977571a8708ec5497f68e5be8792a142418c1e366c6e726a3f9671554a84e020b897ce5fdf7b1c6bcd029dee45972109a871e2a92929e89cca40d43c5b756d4d318c10fd3381854a609ab2d5791355cf9242ee2fe40d10588eca7eb0f73994a9a0b2516a3f2a15a8094431a5b947606b408412439f226d725d18ebd1821bdcbd99f85e41e5f048d01dfe5742219741827c56ce4106e3880bed339138ce9b08abbc2494743cd36733d2c0ca23afe492eace7195380916d97b5cf6125381e8c5e79c43fadc31471a444b88ed8c3c203f7c286cf360320bca1ccdcf1139a64fe311340aa9cd88c9ea572e49f01c9269fa5cc1a26f33cde11e8acb17ede95ae4d92ba1bb60b24d16a18ec23a0bf76f501b738c421281bc497644f5e463d72e40870386cdc80869f8de1298d2a4d74f7b2bf3062a350416459c5902d94c8785428c930"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x7c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x64, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x58, 0xb, "6bfcb5f297f4d912e9bff0fc7c35e110c554dcd84758a9be668869dc562b5167f30c7c67337eafbcb0f1df3ca43096addd9bb45cb8a6fcc8540ccb07ea2fe9763467c56c836bcff9fa542c31024e8f12d8ec2d57"}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x2eb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) fadvise64(r2, 0x6fc, 0x80000000, 0x2) 23:39:18 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) [ 1704.500447] netlink: 'syz-executor.2': attribute type 10 has an invalid length. perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:18 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000080), 0x4) syz_io_uring_submit(r2, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@ax25={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}}, 0x200) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xffe3) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xffff) fork() 23:39:18 executing program 6: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x6, 0x7f) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x13, 0xffffffffffffffff, 0x8000000) fork() [ 1704.523564] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1704.527181] FAULT_INJECTION: forcing a failure. [ 1704.527181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1704.529964] CPU: 0 PID: 24867 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1704.531410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1704.533110] Call Trace: [ 1704.533654] dump_stack+0x107/0x167 [ 1704.534410] should_fail.cold+0x5/0xa [ 1704.535231] __alloc_pages_nodemask+0x182/0x600 [ 1704.536200] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1704.537438] ? lock_downgrade+0x6d0/0x6d0 [ 1704.538284] ? lock_acquire+0x197/0x470 [ 1704.539141] alloc_pages_vma+0xbb/0x410 [ 1704.539975] shmem_alloc_page+0x10f/0x1e0 [ 1704.540824] ? shmem_init_inode+0x20/0x20 [ 1704.541703] ? percpu_counter_add_batch+0x8b/0x140 [ 1704.542508] FAULT_INJECTION: forcing a failure. [ 1704.542508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1704.542734] ? __vm_enough_memory+0x184/0x360 [ 1704.542763] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1704.542806] ? shmem_unuse_inode+0xf60/0xf60 [ 1704.542844] shmem_file_read_iter+0x2a6/0xbb0 [ 1704.542885] ? shmem_get_link+0x440/0x440 [ 1704.542914] ? iov_iter_pipe+0xf1/0x2a0 [ 1704.550620] generic_file_splice_read+0x455/0x6d0 [ 1704.551601] ? pipe_to_user+0x170/0x170 [ 1704.552409] ? _cond_resched+0x12/0x80 [ 1704.553223] ? lockdep_init_map_type+0x2c7/0x780 [ 1704.554192] ? pipe_to_user+0x170/0x170 [ 1704.555035] do_splice_to+0x10e/0x160 [ 1704.555815] splice_direct_to_actor+0x2fe/0x980 [ 1704.556766] ? pipe_to_sendpage+0x380/0x380 [ 1704.557646] ? do_splice_to+0x160/0x160 [ 1704.558455] ? security_file_permission+0x24e/0x570 [ 1704.559492] do_splice_direct+0x1c4/0x290 [ 1704.560337] ? splice_direct_to_actor+0x980/0x980 [ 1704.561317] ? selinux_file_permission+0x92/0x520 [ 1704.562306] ? security_file_permission+0x24e/0x570 [ 1704.563369] vfs_copy_file_range+0x4f8/0x1290 [ 1704.564296] ? generic_file_rw_checks+0x240/0x240 [ 1704.565282] ? __fget_files+0x296/0x4c0 [ 1704.566116] __do_sys_copy_file_range+0x193/0x420 [ 1704.567112] ? vfs_copy_file_range+0x1290/0x1290 [ 1704.568072] ? ksys_write+0x1a9/0x260 [ 1704.568850] ? __ia32_sys_read+0xb0/0xb0 [ 1704.569678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1704.570751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1704.571811] do_syscall_64+0x33/0x40 [ 1704.572561] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1704.573601] RIP: 0033:0x7f0aae61ab19 [ 1704.574361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.578119] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1704.579689] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1704.581162] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1704.582629] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1704.584090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.585539] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1704.587056] CPU: 1 PID: 24864 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1704.588470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1704.590142] Call Trace: [ 1704.590686] dump_stack+0x107/0x167 [ 1704.591422] should_fail.cold+0x5/0xa [ 1704.592199] __alloc_pages_nodemask+0x182/0x600 [ 1704.593145] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1704.594352] ? lock_downgrade+0x6d0/0x6d0 [ 1704.595208] ? lock_acquire+0x197/0x470 [ 1704.596034] alloc_pages_vma+0xbb/0x410 [ 1704.596846] shmem_alloc_page+0x10f/0x1e0 [ 1704.597682] ? shmem_init_inode+0x20/0x20 [ 1704.598558] ? percpu_counter_add_batch+0x8b/0x140 [ 1704.599552] ? __vm_enough_memory+0x184/0x360 [ 1704.600461] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1704.601560] ? shmem_unuse_inode+0xf60/0xf60 [ 1704.602463] shmem_file_read_iter+0x2a6/0xbb0 [ 1704.603392] ? shmem_get_link+0x440/0x440 [ 1704.604230] ? iov_iter_pipe+0xf1/0x2a0 [ 1704.605035] generic_file_splice_read+0x455/0x6d0 [ 1704.606013] ? pipe_to_user+0x170/0x170 [ 1704.606831] ? _cond_resched+0x12/0x80 [ 1704.607637] ? lockdep_init_map_type+0x2c7/0x780 [ 1704.608593] ? pipe_to_user+0x170/0x170 [ 1704.609395] do_splice_to+0x10e/0x160 [ 1704.610167] splice_direct_to_actor+0x2fe/0x980 [ 1704.611116] ? pipe_to_sendpage+0x380/0x380 [ 1704.611986] ? do_splice_to+0x160/0x160 [ 1704.612792] ? security_file_permission+0x24e/0x570 [ 1704.613806] do_splice_direct+0x1c4/0x290 [ 1704.614647] ? splice_direct_to_actor+0x980/0x980 [ 1704.615615] ? selinux_file_permission+0x92/0x520 [ 1704.616593] ? security_file_permission+0x24e/0x570 [ 1704.617611] vfs_copy_file_range+0x4f8/0x1290 [ 1704.618522] ? generic_file_rw_checks+0x240/0x240 [ 1704.619511] ? __fget_files+0x296/0x4c0 [ 1704.620337] __do_sys_copy_file_range+0x193/0x420 [ 1704.621363] ? vfs_copy_file_range+0x1290/0x1290 [ 1704.622315] ? ksys_write+0x1a9/0x260 [ 1704.623089] ? __ia32_sys_read+0xb0/0xb0 [ 1704.623915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1704.624964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1704.626015] do_syscall_64+0x33/0x40 [ 1704.626798] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1704.627831] RIP: 0033:0x7fcbfd904b19 [ 1704.628581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.632268] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1704.633787] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1704.635219] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1704.636641] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1704.638066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.639509] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:39:18 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:18 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0fdddf524148828ae92e4db5ec078ceb932bc18db099feaf128b66a86c158925d33f068a14ebc73dbd5c5bb36ac4368e29c8d5eafebbfff3624a7e200b7cca4f6ff1828de7f14f51a7804296e7224a683501702f5def12f3e558029920c637437c04856ade82f3dc80074787be2fdf3ce23b6f0c08f6a2445117"]) 23:39:19 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) fstat(r1, &(0x7f0000000080)) fork() 23:39:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 11) 23:39:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1704.917930] audit: type=1326 audit(1704152359.092:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1704.925655] audit: type=1326 audit(1704152359.099:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1704.935757] audit: type=1326 audit(1704152359.106:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1704.950139] audit: type=1326 audit(1704152359.107:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1704.963182] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1704.969026] EXT4-fs (loop7): Unrecognized mount option "ÝßRAH‚Šé.MµìŒë“+Á°™þ¯‹f¨l‰%Ó?ŠëÇ=½\[³jÄ6Ž)ÈÕêþ»ÿóbJ~ |ÊOoñ‚çñOQ§€B–ç"Jh5p/]ïóåX™ Æ7C|…jÞ‚óÜ€G‡¾/ß<â;o ö¢DQ" or missing value [ 1704.990194] audit: type=1326 audit(1704152359.108:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1705.004485] FAULT_INJECTION: forcing a failure. [ 1705.004485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1705.007037] CPU: 1 PID: 25185 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1705.008440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.010154] Call Trace: [ 1705.010711] dump_stack+0x107/0x167 [ 1705.011467] should_fail.cold+0x5/0xa [ 1705.012260] __alloc_pages_nodemask+0x182/0x600 [ 1705.013225] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1705.014457] ? lock_downgrade+0x6d0/0x6d0 [ 1705.015326] ? lock_acquire+0x197/0x470 [ 1705.016161] alloc_pages_vma+0xbb/0x410 [ 1705.016985] shmem_alloc_page+0x10f/0x1e0 [ 1705.017821] ? shmem_init_inode+0x20/0x20 [ 1705.018702] ? percpu_counter_add_batch+0x8b/0x140 [ 1705.019698] ? __vm_enough_memory+0x184/0x360 [ 1705.020613] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1705.021721] ? shmem_unuse_inode+0xf60/0xf60 [ 1705.022632] shmem_file_read_iter+0x2a6/0xbb0 [ 1705.023572] ? shmem_get_link+0x440/0x440 [ 1705.024425] ? iov_iter_pipe+0xf1/0x2a0 [ 1705.025247] generic_file_splice_read+0x455/0x6d0 [ 1705.026239] ? pipe_to_user+0x170/0x170 [ 1705.027063] ? _cond_resched+0x12/0x80 [ 1705.027887] ? lockdep_init_map_type+0x2c7/0x780 [ 1705.028865] ? pipe_to_user+0x170/0x170 [ 1705.029688] do_splice_to+0x10e/0x160 [ 1705.030477] splice_direct_to_actor+0x2fe/0x980 [ 1705.031449] ? pipe_to_sendpage+0x380/0x380 [ 1705.032328] ? do_splice_to+0x160/0x160 [ 1705.033136] ? security_file_permission+0x24e/0x570 [ 1705.034152] do_splice_direct+0x1c4/0x290 [ 1705.035024] ? splice_direct_to_actor+0x980/0x980 [ 1705.036001] ? selinux_file_permission+0x92/0x520 [ 1705.036981] ? security_file_permission+0x24e/0x570 [ 1705.038009] vfs_copy_file_range+0x4f8/0x1290 [ 1705.038937] ? generic_file_rw_checks+0x240/0x240 [ 1705.039916] ? __fget_files+0x296/0x4c0 [ 1705.040743] __do_sys_copy_file_range+0x193/0x420 [ 1705.041722] ? vfs_copy_file_range+0x1290/0x1290 [ 1705.042693] ? ksys_write+0x1a9/0x260 [ 1705.043462] ? __ia32_sys_read+0xb0/0xb0 [ 1705.044293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.045344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1705.046392] do_syscall_64+0x33/0x40 [ 1705.047149] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1705.048182] RIP: 0033:0x7f0aae61ab19 [ 1705.048936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.052647] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1705.054175] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1705.055623] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1705.057055] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1705.058483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.059931] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:39:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1705.078452] audit: type=1326 audit(1704152359.108:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a6a1e1b19 code=0x7ffc0000 [ 1705.087473] audit: type=1326 audit(1704152359.113:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f5a6a1e1ad7 code=0x7ffc0000 [ 1705.096773] audit: type=1326 audit(1704152359.113:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5a6a194ab7 code=0x7ffc0000 23:39:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1705.117975] audit: type=1326 audit(1704152359.113:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5a6a194ab7 code=0x7ffc0000 [ 1705.136153] audit: type=1326 audit(1704152359.113:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=25180 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5a6a194ab7 code=0x7ffc0000 [ 1706.505935] Bluetooth: hci2: command 0x0401 tx timeout [ 1708.553621] Bluetooth: hci2: command 0x0401 tx timeout 23:39:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 11) 23:39:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x804}, {&(0x7f00000000c0)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x8e0020, &(0x7f0000000140)={[{@delalloc}]}) 23:39:32 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = fspick(r3, &(0x7f0000000000)='./file0\x00', 0x0) copy_file_range(r4, &(0x7f0000000080)=0x33, r1, &(0x7f00000000c0), 0xc4, 0x0) ftruncate(r3, 0x1000003) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_CQ_RING(&(0x7f0000324000/0x2000)=nil, 0x2000, 0x0, 0x80010, r3, 0x8000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) kcmp(0x0, 0x0, 0x5, r5, r4) syz_io_uring_setup(0x30fb, &(0x7f0000000180)={0x0, 0xbf6c, 0x4, 0x1, 0x5a, 0x0, r0}, &(0x7f0000221000/0x1000)=nil, &(0x7f000066d000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:39:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() io_uring_enter(r0, 0x7cef, 0x6726, 0x1, &(0x7f0000000000)={[0x56d]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) 23:39:32 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:32 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 23:39:32 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 12) 23:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x18, @remote, 0xa7b}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)="ebf348678e323e4cede8263329bff3773990882cfd6c5531c0719ac638b5538919b46a45f7830bff0ba901dc044b4951901a47c8d459d669261ef3724bee62ef9156764e0c2919533de49b129d416e1dcd3199b9d4bfa8c3197cb7f87ac24123d10d62d76a50248f5d8fa12593f59601bbb7d6ea2058b5c89e5d9dd56c2f4ea52a2ae923f18bed24de03b774a38830b7776d8ef21a312b42b12ce90fc5815026c3b1e3602e70af5fcd85b7e771b97d40124dbc644a3fb70263b23f09bfea2e0736afd9bc9ff4bc26061256765ee82af02978bbc900320d974f8df47000"/231, 0xe7}, {&(0x7f0000000280)="4cf562c04181a8aa41c4369156f5685f9caf4c2cdae2e5e312803cf8174e1de9ae1bc3c60584ab77213aadc664145b028bebb8561d215185caaf48dd5a0b9d945ceda344953e96f761559974c6e1b1528e807bf192a7f7715f474c92a5049eeacc1584a5bf8ab0b3fd9dbfa717e1bc14cc78774a", 0x74}, {&(0x7f0000000300)="83762e610591bc0be19b8285bcc017d2cd9fc9934e11b2d0a9f09fb3046df7d50c6cac9aa04ed8b21a6ffe4e67dd7cd782ec1294a74ff4912c5301675e6c86bc2a598772e8244d01296501ba701b387b9b2ff0693953a105f28bda39aee40cfcd5862dca30696edc98dd399a52fb3c86dc1d8936f2b2b57089d5debc2eee15b3e04713fcb8b56553cc31c418d470e8cdb6ec49707fc21536305a03cd3dd348db61a36cdc97159eb70507600daf6d2c18b04128b7ba2bcb99b8f41dce4d78b6015e760e8c301f7cb7a0bbbaade5d85f7897394f733e3605d08a7b3c3f166e38d92867dc3091ccc72dafe59abe4a9278e7dcb8", 0xf2}], 0x3, &(0x7f0000000400)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x9, [0x8, 0x100000000]}}, @enc_lim]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0x20, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x2d3}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x977b}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0xf0}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x800, @local, 0x936}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)="c9a07f530dc2e58225c8517aa1577abb1dc4901f1503772ddfa6498f0d69e62702394ae71b76ea9fcf80abd3e4a0a04dba3a62411968e1d4d96ce208e75fb2c05859584706f96eead4204e1ccfc972798687c83582253f3a2d2a6be133c445289e2213af448874dcc4c2fb007947739897adc0f872b1caefc2107be524b304aa560f9e3687fa925f62c6d3628707f0043809c23ed8daaeae5585104c78f68b2a279209aeda926cb94ffd46feed56b9003d5cbb8f93575999ea9bdb20fc362fea6ba21efc6a2a045dc8397481e25edd", 0xcf}], 0x1}}], 0x2, 0x4000010) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c) setgid(0x0) [ 1718.099831] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1718.103898] FAULT_INJECTION: forcing a failure. [ 1718.103898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1718.105394] CPU: 0 PID: 25405 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1718.106201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.107187] Call Trace: [ 1718.107510] dump_stack+0x107/0x167 [ 1718.107943] should_fail.cold+0x5/0xa [ 1718.108404] __alloc_pages_nodemask+0x182/0x600 [ 1718.108960] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1718.109670] ? lock_downgrade+0x6d0/0x6d0 [ 1718.110157] ? lock_acquire+0x197/0x470 [ 1718.110649] alloc_pages_vma+0xbb/0x410 [ 1718.111148] shmem_alloc_page+0x10f/0x1e0 [ 1718.111637] ? shmem_init_inode+0x20/0x20 [ 1718.112140] ? percpu_counter_add_batch+0x8b/0x140 [ 1718.112722] ? __vm_enough_memory+0x184/0x360 [ 1718.113243] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1718.113883] ? shmem_unuse_inode+0xf60/0xf60 [ 1718.114410] shmem_file_read_iter+0x2a6/0xbb0 [ 1718.114965] ? shmem_get_link+0x440/0x440 [ 1718.115448] ? iov_iter_pipe+0xf1/0x2a0 [ 1718.115926] generic_file_splice_read+0x455/0x6d0 [ 1718.116485] ? pipe_to_user+0x170/0x170 [ 1718.116960] ? _cond_resched+0x12/0x80 [ 1718.117438] ? lockdep_init_map_type+0x2c7/0x780 [ 1718.117995] ? pipe_to_user+0x170/0x170 [ 1718.118475] do_splice_to+0x10e/0x160 [ 1718.118943] splice_direct_to_actor+0x2fe/0x980 [ 1718.119502] ? pipe_to_sendpage+0x380/0x380 [ 1718.120008] ? do_splice_to+0x160/0x160 [ 1718.120475] ? security_file_permission+0x24e/0x570 [ 1718.121082] do_splice_direct+0x1c4/0x290 [ 1718.121577] ? splice_direct_to_actor+0x980/0x980 [ 1718.122157] ? do_splice_direct+0x23/0x290 [ 1718.122669] vfs_copy_file_range+0x4f8/0x1290 [ 1718.123237] ? generic_file_rw_checks+0x240/0x240 [ 1718.123816] ? __fget_files+0x296/0x4c0 [ 1718.124300] __do_sys_copy_file_range+0x193/0x420 [ 1718.124865] ? vfs_copy_file_range+0x1290/0x1290 [ 1718.125420] ? ksys_write+0x1a9/0x260 [ 1718.125876] ? __ia32_sys_read+0xb0/0xb0 [ 1718.126364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1718.127006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1718.127627] do_syscall_64+0x33/0x40 [ 1718.128070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1718.128677] RIP: 0033:0x7f0aae61ab19 [ 1718.129122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.131309] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1718.132210] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1718.133051] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1718.133887] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1718.134755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.135589] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1718.168969] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xfff, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) recvmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)=""/199, 0xc7}], 0x1}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/42, 0x2a}, {&(0x7f0000000700)=""/13, 0xd}, {&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)}], 0x8, &(0x7f0000000a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/204, 0xcc}], 0x1, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}], 0x4, 0x40000004, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1, {r4}}, './file0\x00'}) [ 1718.193330] FAULT_INJECTION: forcing a failure. [ 1718.193330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1718.196052] CPU: 1 PID: 25402 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1718.197470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.199181] Call Trace: [ 1718.199726] dump_stack+0x107/0x167 [ 1718.200483] should_fail.cold+0x5/0xa [ 1718.201256] __alloc_pages_nodemask+0x182/0x600 [ 1718.202232] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1718.203486] ? lock_downgrade+0x6d0/0x6d0 [ 1718.204338] ? lock_acquire+0x197/0x470 [ 1718.205178] alloc_pages_vma+0xbb/0x410 [ 1718.205994] shmem_alloc_page+0x10f/0x1e0 [ 1718.206853] ? shmem_init_inode+0x20/0x20 [ 1718.207720] ? percpu_counter_add_batch+0x8b/0x140 [ 1718.208734] ? __vm_enough_memory+0x184/0x360 [ 1718.209654] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1718.210799] ? shmem_unuse_inode+0xf60/0xf60 [ 1718.211725] shmem_file_read_iter+0x2a6/0xbb0 [ 1718.212671] ? shmem_get_link+0x440/0x440 [ 1718.213535] ? iov_iter_pipe+0xf1/0x2a0 [ 1718.214356] generic_file_splice_read+0x455/0x6d0 [ 1718.215349] ? pipe_to_user+0x170/0x170 [ 1718.216170] ? _cond_resched+0x12/0x80 [ 1718.216987] ? lockdep_init_map_type+0x2c7/0x780 [ 1718.217953] ? pipe_to_user+0x170/0x170 [ 1718.218793] do_splice_to+0x10e/0x160 [ 1718.219581] splice_direct_to_actor+0x2fe/0x980 [ 1718.220553] ? pipe_to_sendpage+0x380/0x380 [ 1718.221453] ? do_splice_to+0x160/0x160 [ 1718.222284] ? security_file_permission+0x24e/0x570 [ 1718.223338] do_splice_direct+0x1c4/0x290 [ 1718.224190] ? splice_direct_to_actor+0x980/0x980 [ 1718.225188] ? selinux_file_permission+0x92/0x520 [ 1718.226192] ? security_file_permission+0x24e/0x570 [ 1718.227251] vfs_copy_file_range+0x4f8/0x1290 [ 1718.228194] ? generic_file_rw_checks+0x240/0x240 [ 1718.229192] ? __fget_files+0x296/0x4c0 [ 1718.230046] __do_sys_copy_file_range+0x193/0x420 [ 1718.231059] ? vfs_copy_file_range+0x1290/0x1290 [ 1718.232032] ? ksys_write+0x1a9/0x260 [ 1718.232826] ? __ia32_sys_read+0xb0/0xb0 [ 1718.233664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1718.234751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1718.235808] do_syscall_64+0x33/0x40 [ 1718.236585] entry_SYSCALL_64_after_hwframe+0x62/0xc7 23:39:32 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1718.237646] RIP: 0033:0x7fcbfd904b19 [ 1718.238592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.242453] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1718.244027] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1718.245505] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1718.246988] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1718.248452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.249908] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:39:32 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 23:39:32 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 13) [ 1718.403214] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 23:39:32 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1718.413326] FAULT_INJECTION: forcing a failure. [ 1718.413326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1718.414868] CPU: 0 PID: 25728 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1718.415614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.416515] Call Trace: [ 1718.416811] dump_stack+0x107/0x167 [ 1718.417211] should_fail.cold+0x5/0xa [ 1718.417631] __alloc_pages_nodemask+0x182/0x600 [ 1718.418138] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1718.418798] ? lock_downgrade+0x6d0/0x6d0 [ 1718.419247] ? lock_acquire+0x197/0x470 [ 1718.419702] alloc_pages_vma+0xbb/0x410 [ 1718.420139] shmem_alloc_page+0x10f/0x1e0 [ 1718.420582] ? shmem_init_inode+0x20/0x20 [ 1718.421055] ? percpu_counter_add_batch+0x8b/0x140 [ 1718.421592] ? __vm_enough_memory+0x184/0x360 [ 1718.422089] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1718.422724] ? shmem_unuse_inode+0xf60/0xf60 [ 1718.423217] shmem_file_read_iter+0x2a6/0xbb0 [ 1718.423708] ? shmem_get_link+0x440/0x440 [ 1718.424161] ? iov_iter_pipe+0xf1/0x2a0 [ 1718.424596] generic_file_splice_read+0x455/0x6d0 [ 1718.425116] ? pipe_to_user+0x170/0x170 [ 1718.425543] ? _cond_resched+0x12/0x80 [ 1718.425980] ? lockdep_init_map_type+0x2c7/0x780 [ 1718.426490] ? pipe_to_user+0x170/0x170 [ 1718.426943] do_splice_to+0x10e/0x160 [ 1718.427353] splice_direct_to_actor+0x2fe/0x980 [ 1718.427853] ? pipe_to_sendpage+0x380/0x380 [ 1718.428315] ? do_splice_to+0x160/0x160 [ 1718.428744] ? security_file_permission+0x24e/0x570 [ 1718.429288] do_splice_direct+0x1c4/0x290 [ 1718.429726] ? splice_direct_to_actor+0x980/0x980 [ 1718.430243] ? selinux_file_permission+0x92/0x520 [ 1718.430783] ? security_file_permission+0x24e/0x570 [ 1718.431324] vfs_copy_file_range+0x4f8/0x1290 [ 1718.431807] ? generic_file_rw_checks+0x240/0x240 [ 1718.432324] ? __fget_files+0x296/0x4c0 [ 1718.432772] __do_sys_copy_file_range+0x193/0x420 [ 1718.433285] ? vfs_copy_file_range+0x1290/0x1290 [ 1718.433787] ? ksys_write+0x1a9/0x260 [ 1718.434209] ? __ia32_sys_read+0xb0/0xb0 [ 1718.434648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1718.435217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1718.435779] do_syscall_64+0x33/0x40 [ 1718.436178] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1718.436727] RIP: 0033:0x7f0aae61ab19 [ 1718.437125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.439104] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1718.439913] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1718.440678] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1718.441442] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1718.442220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.442989] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:39:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x6, 0x5, 0x1, 0x7fff, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000000080), 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000080), 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r3, r4, r0, r1, r0, r0, r5], 0x8) getdents64(r2, &(0x7f0000001280)=""/192, 0xc0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000280)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x5a, &(0x7f0000000080)=@dstopts={0x8, 0x2, '\x00', [@ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="620204015a50ad41fc000000000000f9c160d5b70dc91b000000000000000000"], 0x18) fcntl$notify(r0, 0x402, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0, &(0x7f0000000300), 0x14a00d, 0x0) 23:39:32 executing program 4: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x2b, 0x4, 0x8, "5921c7dcbdc95a4ba2fadd0206f63d2c", "5f916825f8f99a881a777d02967ca19e3eb885470352"}, 0x2b, 0x1) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x100) fork() 23:39:32 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 23:39:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 12) 23:39:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={0x6, 0x5, 0x1, 0x7fff, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000000080), 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x40, &(0x7f0000000080), 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r3, r4, r0, r1, r0, r0, r5], 0x8) getdents64(r2, &(0x7f0000001280)=""/192, 0xc0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000280)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x5a, &(0x7f0000000080)=@dstopts={0x8, 0x2, '\x00', [@ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x20) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="620204015a50ad41fc000000000000f9c160d5b70dc91b000000000000000000"], 0x18) fcntl$notify(r0, 0x402, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0, &(0x7f0000000300), 0x14a00d, 0x0) 23:39:32 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="226433aae01709c6529a79ee6b883b67187ec34009213e98d152e3f49149f68d9650196f0af3f39f0f58d26861ba83cc255a93049eeb0fc64f8323cb9621b2dee7ac2de989db38a9b62adcd5d2c19f8b368949763d4cfc7ad61bc675f849d839b74b5e57c3314fd9d0e58022a2e3faab126c7015b5089c9bf5a4ed8bc8f58f1b384163f96c593a7ea4b3062627c212e7ff779bc14578359d89fd0e192e956dd749a989d81e657dc8f6b211d51c21904d32c6b16e4376188d7ba35a98725657af8223dbcc23934c6d491bc4913e7c2caf", 0xd0}], 0x1) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="407f0000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf256000000008000300", @ANYRES32=r3, @ANYBLOB="0600b101084981ef1dddfafa0301060106e3209fb840d7855e78d48bfbc3d80b8c8c6c31"], 0x40}, 0x1, 0x0, 0x0, 0x404c851}, 0x8000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x20ce1, 0x0) ftruncate(r5, 0x1000003) write$binfmt_elf64(r5, &(0x7f0000000a00)=ANY=[], 0x5bc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0xc}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040890) io_uring_enter(r4, 0x43b2, 0xa9c3, 0x3, &(0x7f00000000c0)={[0xdc]}, 0x8) fork() 23:39:32 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 1718.720942] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1718.739316] FAULT_INJECTION: forcing a failure. [ 1718.739316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1718.742034] CPU: 1 PID: 25848 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1718.743473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1718.745183] Call Trace: [ 1718.745726] dump_stack+0x107/0x167 [ 1718.746491] should_fail.cold+0x5/0xa [ 1718.747314] __alloc_pages_nodemask+0x182/0x600 [ 1718.748288] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1718.749528] ? lock_downgrade+0x6d0/0x6d0 [ 1718.750391] ? lock_acquire+0x197/0x470 [ 1718.751254] alloc_pages_vma+0xbb/0x410 [ 1718.752098] shmem_alloc_page+0x10f/0x1e0 [ 1718.752964] ? shmem_init_inode+0x20/0x20 [ 1718.753865] ? percpu_counter_add_batch+0x8b/0x140 [ 1718.754906] ? __vm_enough_memory+0x184/0x360 [ 1718.755841] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1718.756965] ? shmem_unuse_inode+0xf60/0xf60 [ 1718.757906] shmem_file_read_iter+0x2a6/0xbb0 [ 1718.758881] ? shmem_get_link+0x440/0x440 [ 1718.759735] ? iov_iter_pipe+0xf1/0x2a0 [ 1718.760555] generic_file_splice_read+0x455/0x6d0 [ 1718.761536] ? pipe_to_user+0x170/0x170 [ 1718.762351] ? _cond_resched+0x12/0x80 [ 1718.763177] ? lockdep_init_map_type+0x2c7/0x780 [ 1718.764149] ? pipe_to_user+0x170/0x170 [ 1718.764965] do_splice_to+0x10e/0x160 [ 1718.765748] splice_direct_to_actor+0x2fe/0x980 [ 1718.766743] ? pipe_to_sendpage+0x380/0x380 [ 1718.767638] ? do_splice_to+0x160/0x160 [ 1718.768451] ? security_file_permission+0x24e/0x570 [ 1718.769506] do_splice_direct+0x1c4/0x290 [ 1718.770363] ? splice_direct_to_actor+0x980/0x980 [ 1718.771340] ? selinux_file_permission+0x92/0x520 [ 1718.772330] ? security_file_permission+0x24e/0x570 [ 1718.773370] vfs_copy_file_range+0x4f8/0x1290 [ 1718.774299] ? generic_file_rw_checks+0x240/0x240 [ 1718.775304] ? __fget_files+0x296/0x4c0 [ 1718.776150] __do_sys_copy_file_range+0x193/0x420 [ 1718.777142] ? vfs_copy_file_range+0x1290/0x1290 [ 1718.778102] ? ksys_write+0x1a9/0x260 [ 1718.778893] ? __ia32_sys_read+0xb0/0xb0 [ 1718.779741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1718.780801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1718.781879] do_syscall_64+0x33/0x40 [ 1718.782637] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1718.783703] RIP: 0033:0x7fcbfd904b19 [ 1718.784461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1718.788235] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1718.789782] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1718.791252] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1718.792719] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1718.794177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.795648] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:39:47 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 14) 23:39:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 23:39:47 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:39:47 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00008a4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x20010, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:39:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) pwritev(r0, &(0x7f0000000140), 0x0, 0x1, 0xffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 23:39:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1000, 0x2a0800) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) sendfile(r1, r3, &(0x7f0000000100)=0x8, 0x7) 23:39:47 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x1548, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) splice(r1, &(0x7f0000000680)=0x3, r2, &(0x7f00000006c0)=0x9, 0x1, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000780)=ANY=[@ANYBLOB="01bb2b0a250000000251dd14d1a43ea0", @ANYRES32=r3, @ANYBLOB="0100dca159fd3df58d1e67937f9fa363"]) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000400)="7710601517122dd427abf12a6351b17b21597d0d5c63cfa0f3ad9acd1f82b284a93ab747b8dde5acfbe04ba7f196268f7542e68600b4873c8d860cf1ea58d2da251da6b5cf6973ad0a3be294e24bd459c06537db35ea02c3474ce5a2964bd33e6f3092f52f36bbd240883e6b106f145cd6bf56cefd840542d0207e276727b6c2e3d0032e46f0e4d8db5cdd5fe30c2bf8a250330340d4c46dccfc5a60ec692f2fd1354698ce92571a0544d818c4ed84d9a84688525926ba3f87da474dcf4abb939dade4af74486e29c5a2153a743fd7ba876ca9eb32a110bfc0aa1ca9acc00f447ac747", 0xe3}, {&(0x7f0000000180)="9998871adc03e097416276189de46657d097f3d898c1c03b4bf3795ea502277211a15b9eb09942e6ee5b02ed9166c0bcb0f7dcb714c561c8295bdd9e87cecf12357c33b169f2d14e4cd3e4a185ce86903c3dfd", 0x53}, {&(0x7f0000000500)="e956a958248ed30b11d3647c82f57bb32b44283c065aaf195d44c51127518581edff8bd83cf12925ec7d44e00fa4556a3701eb7c42164dd3206c865be69564958ffb1f63354419156df782c66d1ba7142e370eb941e153262f0acb4180508a49f0cbba029b46d1c49de3a4f130a2d69da9c77b28b91097e86759bdb80ee2b90b18092bc34a57f2df9d0c1aab853aee7c5edc4c73f38fb77f748b4e8a3b07157ee9d9af99dfbb749de5249cc06d3ed4391ecfc485dda6b38182ae833c5ade09599c", 0xc1}, {&(0x7f0000000000)="e02e44e8ba68322bb95d3148aba1d4e7d619ad03db9fce928561c0bd", 0x1c}, {&(0x7f0000000240)="49afbf0506d8179f7c9304d3924c78af98f42fc097e84b467dbc67772a2e2ded596d06bda5ee686ea17618a3263a2421ece16bf76723db92695e9ab303ad1027a04d676fc62c8a18ecbc197ce9d29f7aac32b9ff8688bc1e388ea97275ecea8594b6f95d06b00519813c313c562cb68a95a51cca19c9f433", 0x78}], 0x5, 0x896, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000080)={0x24, @short={0x2, 0x3}}, 0x14) sendmmsg$sock(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8000}) 23:39:47 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 13) [ 1733.432068] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1733.439272] FAULT_INJECTION: forcing a failure. [ 1733.439272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1733.440889] CPU: 1 PID: 26070 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1733.441668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.442598] Call Trace: [ 1733.442911] dump_stack+0x107/0x167 [ 1733.443313] should_fail.cold+0x5/0xa [ 1733.443730] __alloc_pages_nodemask+0x182/0x600 [ 1733.444238] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1733.444892] ? lock_downgrade+0x6d0/0x6d0 [ 1733.445352] ? lock_acquire+0x197/0x470 [ 1733.445797] alloc_pages_vma+0xbb/0x410 [ 1733.446237] shmem_alloc_page+0x10f/0x1e0 [ 1733.446704] ? shmem_init_inode+0x20/0x20 [ 1733.447215] ? percpu_counter_add_batch+0x8b/0x140 [ 1733.447762] ? __vm_enough_memory+0x184/0x360 [ 1733.448266] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1733.448879] ? shmem_unuse_inode+0xf60/0xf60 [ 1733.449362] shmem_file_read_iter+0x2a6/0xbb0 [ 1733.449865] ? shmem_get_link+0x440/0x440 [ 1733.450317] ? iov_iter_pipe+0xf1/0x2a0 [ 1733.450747] generic_file_splice_read+0x455/0x6d0 [ 1733.451305] ? pipe_to_user+0x170/0x170 [ 1733.451736] ? _cond_resched+0x12/0x80 [ 1733.452173] ? lockdep_init_map_type+0x2c7/0x780 [ 1733.452713] ? pipe_to_user+0x170/0x170 [ 1733.453157] do_splice_to+0x10e/0x160 [ 1733.453581] splice_direct_to_actor+0x2fe/0x980 [ 1733.454099] ? pipe_to_sendpage+0x380/0x380 [ 1733.454584] ? do_splice_to+0x160/0x160 [ 1733.455050] ? security_file_permission+0x24e/0x570 [ 1733.455605] do_splice_direct+0x1c4/0x290 [ 1733.456056] ? splice_direct_to_actor+0x980/0x980 [ 1733.456576] ? selinux_file_permission+0x92/0x520 [ 1733.457102] ? security_file_permission+0x24e/0x570 [ 1733.457659] vfs_copy_file_range+0x4f8/0x1290 [ 1733.458158] ? generic_file_rw_checks+0x240/0x240 [ 1733.458709] ? __fget_files+0x296/0x4c0 [ 1733.459165] __do_sys_copy_file_range+0x193/0x420 [ 1733.459690] ? vfs_copy_file_range+0x1290/0x1290 [ 1733.460199] ? ksys_write+0x1a9/0x260 [ 1733.460634] ? __ia32_sys_read+0xb0/0xb0 [ 1733.461090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.461657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.462206] do_syscall_64+0x33/0x40 [ 1733.462607] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1733.463188] RIP: 0033:0x7f0aae61ab19 [ 1733.463600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.465551] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1733.466380] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1733.467195] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1733.467977] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1733.468769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.469543] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1733.473594] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1733.481794] FAULT_INJECTION: forcing a failure. [ 1733.481794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1733.483151] CPU: 1 PID: 26067 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1733.483892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.484775] Call Trace: [ 1733.485080] dump_stack+0x107/0x167 [ 1733.485473] should_fail.cold+0x5/0xa [ 1733.485890] __alloc_pages_nodemask+0x182/0x600 [ 1733.486415] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1733.487062] ? lock_downgrade+0x6d0/0x6d0 [ 1733.487536] ? lock_acquire+0x197/0x470 [ 1733.487973] alloc_pages_vma+0xbb/0x410 [ 1733.488414] shmem_alloc_page+0x10f/0x1e0 [ 1733.488867] ? shmem_init_inode+0x20/0x20 [ 1733.489324] ? percpu_counter_add_batch+0x8b/0x140 [ 1733.489848] ? __vm_enough_memory+0x184/0x360 [ 1733.490334] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1733.490932] ? shmem_unuse_inode+0xf60/0xf60 [ 1733.491422] shmem_file_read_iter+0x2a6/0xbb0 [ 1733.491908] ? shmem_get_link+0x440/0x440 [ 1733.492366] ? generic_file_splice_read+0x261/0x6d0 [ 1733.492919] generic_file_splice_read+0x455/0x6d0 [ 1733.493453] ? pipe_to_user+0x170/0x170 [ 1733.493912] ? lockdep_init_map_type+0x2c7/0x780 [ 1733.494439] ? pipe_to_user+0x170/0x170 [ 1733.494873] do_splice_to+0x10e/0x160 [ 1733.495310] splice_direct_to_actor+0x2fe/0x980 [ 1733.495812] ? pipe_to_sendpage+0x380/0x380 [ 1733.496297] ? do_splice_to+0x160/0x160 [ 1733.496711] ? security_file_permission+0x24e/0x570 [ 1733.497265] do_splice_direct+0x1c4/0x290 [ 1733.497705] ? splice_direct_to_actor+0x980/0x980 [ 1733.498233] ? selinux_file_permission+0x92/0x520 [ 1733.498778] ? security_file_permission+0x24e/0x570 [ 1733.499331] vfs_copy_file_range+0x4f8/0x1290 [ 1733.499846] ? generic_file_rw_checks+0x240/0x240 [ 1733.500368] ? __fget_files+0x296/0x4c0 [ 1733.500827] __do_sys_copy_file_range+0x193/0x420 [ 1733.501351] ? vfs_copy_file_range+0x1290/0x1290 [ 1733.501843] ? ksys_write+0x1a9/0x260 [ 1733.502267] ? __ia32_sys_read+0xb0/0xb0 [ 1733.502699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.503315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.503866] do_syscall_64+0x33/0x40 [ 1733.504293] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1733.504847] RIP: 0033:0x7fcbfd904b19 [ 1733.505276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.507236] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1733.508119] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1733.508870] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1733.509633] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1733.510395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.511164] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:39:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 23:40:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 14) 23:40:03 executing program 0: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x2b, 0x4, 0x8, "5921c7dcbdc95a4ba2fadd0206f63d2c", "5f916825f8f99a881a777d02967ca19e3eb885470352"}, 0x2b, 0x1) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x100) fork() 23:40:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) pwritev(r0, &(0x7f0000000140), 0x0, 0x1, 0xffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 23:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00faffffff66696c4f3000"]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000080)='./file0\x00', r5, r6, 0x100) 23:40:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x5bc) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600001, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}, 0x0, 0x10000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}, 0x5) fork() 23:40:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6218, &(0x7f0000000180)={0x0, 0xf025, 0x2, 0x1, 0x13, 0x0, r0}, &(0x7f00000fc000/0x2000)=nil, &(0x7f000063c000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = fork() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x40, 0x1, 0x1, 0x0, 0x6, 0x48400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x800}, 0x100, 0x7, 0x24d8, 0x2, 0xf3, 0x6, 0x9, 0x0, 0x9, 0x0, 0x400}, r2, 0x9, r3, 0xb) ioctl$int_out(r4, 0x5462, &(0x7f0000000100)) 23:40:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 15) [ 1748.968767] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1749.001870] FAULT_INJECTION: forcing a failure. [ 1749.001870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1749.004915] CPU: 1 PID: 26288 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1749.006325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.008022] Call Trace: [ 1749.008566] dump_stack+0x107/0x167 [ 1749.009317] should_fail.cold+0x5/0xa [ 1749.010093] __alloc_pages_nodemask+0x182/0x600 [ 1749.011039] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1749.012275] ? lock_downgrade+0x6d0/0x6d0 [ 1749.013113] ? lock_acquire+0x197/0x470 [ 1749.013938] alloc_pages_vma+0xbb/0x410 [ 1749.014758] shmem_alloc_page+0x10f/0x1e0 [ 1749.015607] ? shmem_init_inode+0x20/0x20 [ 1749.016474] ? percpu_counter_add_batch+0x8b/0x140 [ 1749.017470] ? __vm_enough_memory+0x184/0x360 [ 1749.018385] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1749.019505] ? shmem_unuse_inode+0xf60/0xf60 [ 1749.020414] shmem_file_read_iter+0x2a6/0xbb0 [ 1749.021347] ? shmem_get_link+0x440/0x440 [ 1749.022191] ? iov_iter_pipe+0xf1/0x2a0 [ 1749.023001] generic_file_splice_read+0x455/0x6d0 [ 1749.023988] ? pipe_to_user+0x170/0x170 [ 1749.024796] ? _cond_resched+0x12/0x80 [ 1749.025603] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.026566] ? pipe_to_user+0x170/0x170 [ 1749.027399] do_splice_to+0x10e/0x160 [ 1749.028174] splice_direct_to_actor+0x2fe/0x980 [ 1749.029119] ? pipe_to_sendpage+0x380/0x380 [ 1749.029996] ? do_splice_to+0x160/0x160 [ 1749.030806] ? security_file_permission+0x24e/0x570 [ 1749.031836] do_splice_direct+0x1c4/0x290 [ 1749.032676] ? splice_direct_to_actor+0x980/0x980 [ 1749.033645] ? selinux_file_permission+0x92/0x520 [ 1749.034628] ? security_file_permission+0x24e/0x570 [ 1749.035664] vfs_copy_file_range+0x4f8/0x1290 [ 1749.036589] ? generic_file_rw_checks+0x240/0x240 [ 1749.037570] ? __fget_files+0x296/0x4c0 [ 1749.038398] __do_sys_copy_file_range+0x193/0x420 [ 1749.039404] ? vfs_copy_file_range+0x1290/0x1290 [ 1749.040358] ? ksys_write+0x1a9/0x260 [ 1749.041129] ? __ia32_sys_read+0xb0/0xb0 [ 1749.041956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.043011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.044072] do_syscall_64+0x33/0x40 [ 1749.044829] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1749.045870] RIP: 0033:0x7f0aae61ab19 23:40:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1749.046623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.050556] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1749.052100] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1749.053538] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1749.054979] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1749.056424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.057860] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1749.065068] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 23:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1749.096409] FAULT_INJECTION: forcing a failure. [ 1749.096409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1749.098253] CPU: 0 PID: 26297 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1749.099186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.100311] Call Trace: [ 1749.100679] dump_stack+0x107/0x167 [ 1749.101177] should_fail.cold+0x5/0xa [ 1749.101693] __alloc_pages_nodemask+0x182/0x600 [ 1749.102309] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1749.103143] ? lock_downgrade+0x6d0/0x6d0 [ 1749.103697] ? lock_acquire+0x197/0x470 [ 1749.104248] alloc_pages_vma+0xbb/0x410 [ 1749.104788] shmem_alloc_page+0x10f/0x1e0 [ 1749.105349] ? shmem_init_inode+0x20/0x20 [ 1749.105943] ? percpu_counter_add_batch+0x8b/0x140 [ 1749.106642] ? __vm_enough_memory+0x184/0x360 [ 1749.107281] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1749.108061] ? shmem_unuse_inode+0xf60/0xf60 [ 1749.108689] shmem_file_read_iter+0x2a6/0xbb0 [ 1749.109334] ? shmem_get_link+0x440/0x440 [ 1749.109916] ? iov_iter_pipe+0xf1/0x2a0 [ 1749.110474] generic_file_splice_read+0x455/0x6d0 [ 1749.111166] ? pipe_to_user+0x170/0x170 [ 1749.111728] ? _cond_resched+0x12/0x80 [ 1749.112298] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.112966] ? pipe_to_user+0x170/0x170 [ 1749.113518] do_splice_to+0x10e/0x160 [ 1749.114048] splice_direct_to_actor+0x2fe/0x980 [ 1749.114684] ? pipe_to_sendpage+0x380/0x380 [ 1749.115302] ? do_splice_to+0x160/0x160 [ 1749.115838] ? security_file_permission+0x24e/0x570 [ 1749.116523] do_splice_direct+0x1c4/0x290 [ 1749.117079] ? splice_direct_to_actor+0x980/0x980 [ 1749.117721] ? selinux_file_permission+0x92/0x520 [ 1749.118381] ? security_file_permission+0x24e/0x570 [ 1749.119085] vfs_copy_file_range+0x4f8/0x1290 [ 1749.119710] ? generic_file_rw_checks+0x240/0x240 [ 1749.120365] ? __fget_files+0x296/0x4c0 [ 1749.120913] __do_sys_copy_file_range+0x193/0x420 [ 1749.121549] ? vfs_copy_file_range+0x1290/0x1290 [ 1749.122180] ? ksys_write+0x1a9/0x260 [ 1749.122685] ? __ia32_sys_read+0xb0/0xb0 [ 1749.123255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.123955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.124673] do_syscall_64+0x33/0x40 [ 1749.125184] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1749.125856] RIP: 0033:0x7fcbfd904b19 [ 1749.126352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.128798] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1749.129813] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1749.130770] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1749.131738] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1749.132707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.133690] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:40:03 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x5}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000000140)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='!', 0x1) r4 = openat(r3, &(0x7f0000000180)='./file1\x00', 0x800, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000000000000000}, 0x15100, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000580)={{}, "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"}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r5, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000002c0)) fork() 23:40:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 16) 23:40:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(0xffffffffffffffff, 0x48) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) sendto(r2, &(0x7f0000000180)="86735c4b80396230158ca948b2ea0d13dd2bf227a413934aab3bf1d1838dd9f92c40c4075f7a21ee3dc70378acc802ae8591ff28d11f45872e778579c831148e4714764524df169246fff9a771551f983d3cb6bd1449549f790b2af86bcae2a5a75f0d41fad8ebe77540e6370ad36ac47d3233dfe47a2fb3fa96808f52fe6e557390f37c56e304c38a5e406f8da52cc912a02fc09a368fa07b5af8fd72353c3fd59cde617efe80139139830bc16e908addd552329b09769d2a809f8c821ab23bbc349ae2d3f8cfcd29668aae7b682e4ad824a7537b", 0xd5, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x5bc) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x0, 0x0, 0x2c, 0x0, "8a9fd73e62f922081d24db5b048308a7c6baf52f795386fe96ae1916099981efbc53d2347c0db6e77755d9573caf54356eede44f74eb13e07ab68fb87f8a84f53814c821398fde312a5b3f0c37a0ce0c"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018876400", @ANYRES32=r0, @ANYBLOB="05000000000000802e2f66696c653000"]) accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000280)=0x1c) 23:40:03 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 1) [ 1749.361259] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1749.367509] FAULT_INJECTION: forcing a failure. [ 1749.367509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1749.369176] CPU: 0 PID: 26515 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1749.369997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.370935] Call Trace: [ 1749.371249] dump_stack+0x107/0x167 [ 1749.371683] should_fail.cold+0x5/0xa [ 1749.372131] __alloc_pages_nodemask+0x182/0x600 [ 1749.372678] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1749.373355] ? lock_downgrade+0x6d0/0x6d0 [ 1749.373817] ? lock_acquire+0x197/0x470 [ 1749.374285] alloc_pages_vma+0xbb/0x410 [ 1749.374740] shmem_alloc_page+0x10f/0x1e0 [ 1749.375225] ? shmem_init_inode+0x20/0x20 [ 1749.375713] ? percpu_counter_add_batch+0x8b/0x140 [ 1749.376276] ? __vm_enough_memory+0x184/0x360 [ 1749.376782] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1749.377403] ? shmem_unuse_inode+0xf60/0xf60 [ 1749.377910] shmem_file_read_iter+0x2a6/0xbb0 [ 1749.378428] ? shmem_get_link+0x440/0x440 [ 1749.378899] ? iov_iter_pipe+0xf1/0x2a0 [ 1749.379379] generic_file_splice_read+0x455/0x6d0 [ 1749.379934] ? pipe_to_user+0x170/0x170 [ 1749.380387] ? _cond_resched+0x12/0x80 [ 1749.380839] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.381374] ? pipe_to_user+0x170/0x170 [ 1749.381824] do_splice_to+0x10e/0x160 [ 1749.382252] splice_direct_to_actor+0x2fe/0x980 [ 1749.382777] ? pipe_to_sendpage+0x380/0x380 [ 1749.383281] ? do_splice_to+0x160/0x160 [ 1749.383728] ? security_file_permission+0x24e/0x570 [ 1749.384292] do_splice_direct+0x1c4/0x290 [ 1749.384758] ? splice_direct_to_actor+0x980/0x980 [ 1749.385299] ? selinux_file_permission+0x92/0x520 [ 1749.385846] ? security_file_permission+0x24e/0x570 [ 1749.386414] vfs_copy_file_range+0x4f8/0x1290 [ 1749.386924] ? generic_file_rw_checks+0x240/0x240 [ 1749.387467] ? __fget_files+0x296/0x4c0 [ 1749.387926] __do_sys_copy_file_range+0x193/0x420 [ 1749.388471] ? vfs_copy_file_range+0x1290/0x1290 [ 1749.388995] ? ksys_write+0x1a9/0x260 [ 1749.389416] ? __ia32_sys_read+0xb0/0xb0 [ 1749.389880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.390462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.391035] do_syscall_64+0x33/0x40 [ 1749.391475] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1749.392079] RIP: 0033:0x7f0aae61ab19 [ 1749.392523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.394699] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1749.395603] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1749.396397] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1749.397222] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1749.398051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.398890] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:40:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) pwritev(r0, &(0x7f0000000140), 0x0, 0x1, 0xffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) [ 1749.447477] FAULT_INJECTION: forcing a failure. [ 1749.447477] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.450142] CPU: 1 PID: 26545 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1749.451565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.453252] Call Trace: [ 1749.453796] dump_stack+0x107/0x167 [ 1749.454555] should_fail.cold+0x5/0xa [ 1749.455350] ? alloc_pipe_info+0x10a/0x590 [ 1749.456222] should_failslab+0x5/0x20 [ 1749.457005] kmem_cache_alloc_trace+0x55/0x320 [ 1749.457952] alloc_pipe_info+0x10a/0x590 [ 1749.458798] splice_direct_to_actor+0x774/0x980 [ 1749.459767] ? _cond_resched+0x12/0x80 [ 1749.460571] ? pipe_to_sendpage+0x380/0x380 [ 1749.461458] ? selinux_file_permission+0x92/0x520 [ 1749.462447] ? do_splice_to+0x160/0x160 [ 1749.463275] ? security_file_permission+0x24e/0x570 [ 1749.464311] do_splice_direct+0x1c4/0x290 [ 1749.465164] ? splice_direct_to_actor+0x980/0x980 [ 1749.466147] ? selinux_file_permission+0x92/0x520 [ 1749.467158] ? security_file_permission+0x24e/0x570 [ 1749.468193] vfs_copy_file_range+0x4f8/0x1290 [ 1749.469120] ? generic_file_rw_checks+0x240/0x240 [ 1749.470120] ? __fget_files+0x296/0x4c0 [ 1749.470959] __do_sys_copy_file_range+0x193/0x420 [ 1749.471967] ? vfs_copy_file_range+0x1290/0x1290 [ 1749.472943] ? ksys_write+0x1a9/0x260 [ 1749.473737] ? __ia32_sys_read+0xb0/0xb0 [ 1749.474573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.475638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.476688] do_syscall_64+0x33/0x40 [ 1749.477440] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1749.478478] RIP: 0033:0x7f050f7e0b19 [ 1749.479247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.482940] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1749.484499] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1749.485954] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1749.487419] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1749.488872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.490338] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 23:40:03 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 15) 23:40:03 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="08002bbd7000fedbdf25030000000800060000000000050003000c00000008000600e0000001050003005c000000060001004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x20008004) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x4, 0x9e34, "cfe6f82a396f"}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1749.635570] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1749.641749] FAULT_INJECTION: forcing a failure. [ 1749.641749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1749.643358] CPU: 0 PID: 26730 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1749.644115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.645012] Call Trace: [ 1749.645331] dump_stack+0x107/0x167 [ 1749.645736] should_fail.cold+0x5/0xa [ 1749.646160] __alloc_pages_nodemask+0x182/0x600 [ 1749.646698] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1749.647381] ? lock_downgrade+0x6d0/0x6d0 [ 1749.647871] ? lock_acquire+0x197/0x470 [ 1749.648324] alloc_pages_vma+0xbb/0x410 [ 1749.648778] shmem_alloc_page+0x10f/0x1e0 [ 1749.649238] ? shmem_init_inode+0x20/0x20 [ 1749.649724] ? percpu_counter_add_batch+0x8b/0x140 [ 1749.650278] ? __vm_enough_memory+0x184/0x360 [ 1749.650787] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1749.651409] ? shmem_unuse_inode+0xf60/0xf60 [ 1749.651919] shmem_file_read_iter+0x2a6/0xbb0 [ 1749.652436] ? shmem_get_link+0x440/0x440 [ 1749.652920] ? iov_iter_pipe+0xf1/0x2a0 [ 1749.653379] generic_file_splice_read+0x455/0x6d0 [ 1749.653929] ? pipe_to_user+0x170/0x170 [ 1749.654372] ? _cond_resched+0x12/0x80 [ 1749.654826] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.655378] ? pipe_to_user+0x170/0x170 [ 1749.655818] do_splice_to+0x10e/0x160 [ 1749.656240] splice_direct_to_actor+0x2fe/0x980 [ 1749.656761] ? pipe_to_sendpage+0x380/0x380 [ 1749.657251] ? do_splice_to+0x160/0x160 [ 1749.657701] ? security_file_permission+0x24e/0x570 [ 1749.658259] do_splice_direct+0x1c4/0x290 [ 1749.658734] ? splice_direct_to_actor+0x980/0x980 [ 1749.659277] ? selinux_file_permission+0x92/0x520 [ 1749.659824] ? security_file_permission+0x24e/0x570 [ 1749.660402] vfs_copy_file_range+0x4f8/0x1290 [ 1749.660924] ? generic_file_rw_checks+0x240/0x240 [ 1749.661465] ? __fget_files+0x296/0x4c0 [ 1749.661919] __do_sys_copy_file_range+0x193/0x420 [ 1749.662462] ? vfs_copy_file_range+0x1290/0x1290 [ 1749.662982] ? ksys_write+0x1a9/0x260 [ 1749.663432] ? __ia32_sys_read+0xb0/0xb0 [ 1749.663883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.664465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.665068] do_syscall_64+0x33/0x40 [ 1749.665482] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1749.666069] RIP: 0033:0x7fcbfd904b19 [ 1749.666478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.668518] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1749.669380] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1749.670177] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1749.670971] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1749.671781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.672584] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:40:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 2) 23:40:19 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) dup2(0xffffffffffffffff, r3) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7d0f34f21319e846e8aaef9553c4d037415f15b251da0f32f616c41cdd502b59a751098f3711ac8e207949c0b91e9eff596e74a6890a7744c66bb6c43ba1606ca5808e4ce3708626124b8615f971b49db861cc5db606da2d2c13ab8524c62e834aa5d39da2bf055a55b91b04e9ccb6028d1dd5952447c3458a5506e8a1581b46ee10850138b5312a1b44f70bd1f501bd94173e5d75120d53506ccf3065116bc6a6d4c4fe60348bd20e92267680cbdbb884835496f6b2306d4982d51628c4f6e809b28ce38828d1751c670c87ce1218e10ed49b4bad617b92c7d8847659cb8c96ef80a6cab5f828ba513a0cc92fd0eae491a2190331b934851c", 0xf9, 0xe2}, 0xba) fork() 23:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0xfffffffa, @remote}, 0x1c) r1 = accept$inet6(r0, &(0x7f0000006d80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000006dc0)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000007fc0)={'ip6gre0\x00', &(0x7f0000007f40)={'sit0\x00', 0x0, 0x2f, 0x1, 0x7, 0x7652, 0x28, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0xaef, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x53}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1}, 0x14) [ 1765.054352] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1765.081494] FAULT_INJECTION: forcing a failure. [ 1765.081494] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.084037] CPU: 1 PID: 26839 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1765.085441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.087113] Call Trace: [ 1765.087685] dump_stack+0x107/0x167 [ 1765.088434] should_fail.cold+0x5/0xa [ 1765.089467] ? create_object.isra.0+0x3a/0xa20 [ 1765.090399] should_failslab+0x5/0x20 [ 1765.091185] kmem_cache_alloc+0x5b/0x310 [ 1765.092029] create_object.isra.0+0x3a/0xa20 [ 1765.092932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1765.093978] kmem_cache_alloc_trace+0x151/0x320 [ 1765.094939] alloc_pipe_info+0x10a/0x590 sendmmsg$inet6(r1, &(0x7f000000b6c0)=[{{&(0x7f0000006e00)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x1c, &(0x7f0000007f00)=[{&(0x7f0000006e40)="421fa02efce7ffa3c329768bf750277dde80a6744cd84b943fc627852ddf72e87a70f7148529db0ac1c8c6518215bd0578c73a913b78a55bd655d4e15655f3817a60bccf8e607cff4d8cb79b1c5e8d34a4dae28ac48c6c5c3ed4e45a03f1a7e20cd5f82f3622a4846cc1a679271f8a", 0x6f}, {&(0x7f0000006ec0)="bcd8f1f4f94509cad52ce077c601ae2ecf47e90da27111418370beb396cd4e5dff09af6c76bb8e9017c80c7f8456e6c2a716aa3ca9a66ef954f2", 0x3a}, {&(0x7f0000006f00)="7a17a6491ffece2193b89fe62356728f534fc98d6dd1d4be2e9318bf6e441e649d9a4bad150a2d1d11c3824cbb891f2e1ca5ebb87f9397fa08e0d0ed4db0937055bef6c024e2c8d56b6a88ca5a86689d7202ca6b287efde1434be0b1a1a2f0970078a7d400231a6a0c3e0122702b345f1befb1ba6e17bdff38e3724b7acebabb569585669b05e30622e6aab38747e709ddd53cce52808c12bf075733cc1ab020eef7813a710f05b8a899bdd60e0afb46689fd1974cc101e44819f6c9eb4dc6805e047fdc2bf30f50ea80fb6b95c7ef222b28158a060f120eb7b20f7a95e0506cbaaf7a1cba35658fad19603f7279b01ec00c0f52f819703f9a9ef1054f3da1231f0de09436cfea7f6524dfa7cc963e6fbf9c2cb5100fb38270b898c2dba360437723a46978ccb76db10c07819ff13015bf43e52662349e66523fe0d5e996d390195cd1689e3d4626eb3a2e3b9608680f6088fd08775b4f20ab0f78d513670c69ad203147e234a2bb4f3ae2c09305cd5cc1c8f3504343d9d28caa7ff714b12e09f71fa563542bd19f964a4e5a0431bc43b2954729c99059ee300f9fba87a09ba9482f489b5ccd1bf710ebe6446624e51f620e98af36580ea97bd21048cd5f327824e94545e3250c96230f407bf7cac0affbcefc946254cf1912b2464dedaa85f59bf263a6c67eb46de50c87f0d1ead3d2e61a6b49aa1ab164dc39d0fb5cd106e4c29aee99168486cc7e6f834c0840e5832ff40610ca59736eeb27ca59ceec21b899f95904a60509f98b3a8dc5a2536a61f2a5f2eb52856e297ef390773f5287fe631d42efd6ceab5af4e257a8e2681a2977db04e813dae6ec95e58f20ffbb20e22707d21c07467de2d94bf59c2b86f660b876ae9e19b6f2d14e67fa5005b26a6af70c75095a7161eb960ef63a8033e04aaee3d824f7eb26d98066389b0b98a11202a9556c0b9166c458b9d9f940ef3e0eab129b711a59ae5e43f09d87e657bbe69709e299d351c21be87df4807302be4e68d5a3b35ca0254579965bbb4ab186174580359899465af200bc65ce94d5b363cad7c1b527529173753d40530a810ac2ca6855dc59b0d35afd9910df0557176f8394313b5a1869cfe674396e9acfc14388afd13103daa95eeee6925f21be0f4de0af845f13b814c0ab9ab523a5f3bf24116cc2ad21b7151b42de3303f0f070470a726f3a09460e46f8e6e8a6e6838c3a3758703bb7fd594c11748c5cb63e2adf7e53bde32cbbc8ed9a710ed1408cca6d845de0266bd124a4dd55e9994136c72aaddd33d83df8d7b32b76e4e0d154c4f9a7804b76613d121214aea1cea373a7029bffb2cdc75ab212d4d18eed614c59ec2edd5a7da5bd15fe9925b1308db4b47cae8b5a26ddad244ec667740932a10bb66d0d39f7df2d40bb8fc7f060ed07f538ac8caafe28f3348b019f76ed6f2f7efb9313731d83424aa25f5b82a777f0a16dd062178c3568594f2c0ee2de3e37d03b58c9d9146067ae8cde27f030385a7fbc1284433486d3f4bc103533800aa7b3aa3f44554adec826facd328b860e78c5a63f7cb56cc8d21cf25512da8fd4f7d433e2f80c85bf8f138db57c32f1e7cb07bb2f3e683b942b6b4573dcce5b48d8f6c4d9d75863e936b453282736b124aaeebc13774932acd9faa2976dcd28ecc9342b47efcc09a6e953cc96821ec648eb7e3cd5ab685e50482aa7f7a4cea189c455ce0a6d1cb913453c8b5dc96db97357ac1163dc7c7334978e64669475b6e2f81eac882494b5973e98ba5dbca2f53c12ecba99463130e30607c022c763fcf88e19f7e202f8b5908fb78d44da99b7dcad3d2a0e2e848d7631a18d93fce269ff32d63877b3fcebdef88341cc218e55e0fc863910fb7d36b585ac28223ae33be2be72c43d471cdd7ae1c5f4787503c855bd0a7e8201fa7d9d703c9b370d869608193a8f0e94590f1d9b2d1a8c66f2dfe7eb6758c71334669e285ef901eeeaccc1a90e8f6b00706c153e895a2c053cef1a5725d7735d376c1cfdf65feede4bdba4e3ceff28d5246aeac1f53c81ca71be185d113f9db62ad550b52f4bb27f290449d425b69445e6205caa943b1c840085dfb4a3d422c7514975db32d7fc6b9bad453dc5316e4302e744583c6bb94f2db7edaa22cb89bcfcd2ae6ef2c330419c7349010b943be5bd936ef5181b6ec49607709f91b4f694cfc01042a18b5fd2c7fb03359a6c0769ab294a8c2f3bb2442c701db3af85c4d1d9d99802464aa9412ac1f7ecb3f34649f35d64f5413cef139ad042d7f71e51e74645d0af6cc694ef6272f8d4b99d91f51e7dbfe7139bf6bab4fe87a9860bf226218e7776ea5a286e443017b727bf21a02894ce4cb53d20f21e232741652114ae35f73f09fa999060864696ce02651bc9a7163443f7c3927a6459546a8a0e7bde42ec3d07b34a4f5b5a45b5ed90f338aa3ce9646442e4c8e57011d0509055f4fd817b4bc8ef0718eae0495dd6787cac7a2b3a7f292f5bff331cbf5733f9d9a8b776aec03ffad3d987771a8122d56abb55c6a3bb013a88464f08e55ec83ee140a4440ddc989d10bf3c651fcbc66e9b22124ee2054dceff55cc8c3b53b047fd4884dcdfc1d8f096cf28fb0f683b5f38a95887701731bca4074b3767d3e3a74c3a787ad6636bb663035310925f5bceda20499cd6d4883db1a12ea63f2036ffc8cb158395af6075a697d923b4305ee2febeee11ff86fbb8b77bb7c4252d9ef137bb9fd7dd1a7a74d878032d01e29a06a268308bb0d804fe730f9429dc04a04c84661646458771df2fd118106d728ff998a2d5ed5f876a2140b0413b41311c4657076c11da12c35d44d3b2b232badee0fb55656996bad4221b0d54dafaa182adecdae4e7483775891d394a0fc1a3263222afcc226070b57b7c9e4a45907792617320e52a1658eb4ced076f5452ba847ed32726c4a0b870d4ba95c0c244d36f9a9162735bc4be3824cb6af079d27919e1b6414a6b2137fd44aae5fcdfe9b98b07e9f4a52b35df09f5ede6a3be8169df78e232f70ce8cc7c8725279a5b8032f00fc56ff00aad1976149c836929aa74bba20731773fce21df9b28ebc44a4167e0e3a6d097c7aa01cd4561f9a678bb11e0913781aefc3bd35bb764eb12d470d8dab9578aaf765c6045cb9263720621b0bd3ede7a8493062d9a0cd5e986169717f99aecbfc36364d672c549aef57253f858dc67f82f00df27c8017e37f2d6d9731f00f4aa8b5ca8a0b46eb37c939a70c8a4e8c9b582fa1c8b2f391c989ea3632b2d34ae01f2b85f682300cbd8f890fa7e0886991d5dcf8f7a9bd014d2788024a34ad972d0a8a21068a777eca5750a1f1a4cec460c8eaddaeded9423fe87b0d10572f28a6eb7f92c6032d11e315d17600b8ff5c33eba48e7361a923b3cee891d49a7c0b8867605e8816a8c47628cb92646a18c31d7bdd30ffae775696910a47c5bbcb8ea8b0e5600a711756b50e7d3b27dc7188cff5708dfdcbd724cac300d4b9fb82dccb0fc855fa789bfbab8fca533cba7b4daa126854be49df66cc109b12758af8509f3fd194367a241a4af0d3a47f5f9f759dbd0c3ea5f8e2a4000731a9ff1ea909707cf0d1b5a9ca0798265f3b97379c26925363b35ad9e287d47a56f9e1115284edffcc7818d6a5e0a34a80c16f325c6d784ee5140ca8964b10d1439c117c45f8e052e38e253d8dfa3c784ab3a0383462fd7393f5ce48bc385407f70aca2c838c62bf3d6e450770bce6d0d4953f83895a156901869e2dcaf706876ed8ef36c0216a869d1a1d283079aab914043a2c77ae8df4b17bd585524210824d18d96e132efa4338191481eb2e05ae3e21d953d72f935f72f8efeebbc5a6730d08d3d84b10d322a8ce7e9d1ab58f06bb1772a189b5fc3bce552db2eaee755137cd723db6c23caabd39fc1f83a7ad5eab426e2fbb6b78033cb3a2303ca2c68f94ea228d9a0c7f0a37bc4b8a5f023e7782f2c7f83211246030be07711008c8c56d5cc932dd14c189c929b7b78318bef4dc6205c50f3a3d27302f41c9a4048914b4023108e12859be85328b28fd212a77f673219f32c58bd060e5faa555616959e5e1e5a0378f0bb34e2df11533e4018dbf039508a92ed48250f61138993a36c117175812de796940fef808de3a88769f8706b967905207378f94c3ca398d9122cb5e48e7c3a4b90815b7f65d042ca971243ecd982283f7d520e6f7fdc41b1670bb5e89088c7e0b12f2490c1d009edb77f91db1c3348efc77b11c2027c0de8477989fb1eebd022d6c8a466bd687610740e3ac379b00d44e19dbbce873662a48b7a6710e29be642c5d734724c986e1b133caccb6a40669f1ef88257822af19d54f4c4cee5ac4fd10ecc63b26a36ccb8883189a173480772739ee7763971e5f295a1751fd0e159e7a0ecb76a965d3eef55cb93361d07e7ed565ed2b3b6ddd0d385c11e591ca98a3328cb2168fb4acfd87c8957d2981d6c9e27f6698f7e3ad185e58879024e79d971ea10a79dcc7294c84c7928649b48046b85e54fba09f195b59ba3ba8830f6070b4eac5b4d241c465f5ebe67b967d4ac1184cfde400b2955834907bee6b51249533253365ee68baaafbeb15fad21262a1d70c999066d70417263a50d84471f49f059991de4450916b97988bd2cc299d3af6ded86fdbce28a7e35459cd0a4ac9fb277632f03ec3a16bd876d98fd4d54951b39f566335e08f3d64be4caea501b4d98caabe06c292d82e108066beee6800c138ef31e3fe1191e21cb0509ad7ce06cd11e473da86f74ecbbdd4ac8581a8799da1a6c27da6d618aa7e9a36dbb0fbdcfd790d1238a58a700b74cb4ee9edc3ebbd13633ac9979fcd75b2e5155ebff696a853ab992e408b0c5c0d3aca9d552421cace5ed04c4370cba26138d9c38f2adcda053d90d0249dc043c3503d6d37b5c4ec5125c0c05a27b33dcfebcdcc2bce0c5674667aff09349696e5e3a400f704700917942b54ae8792f17c13026e0da09bdbe2c604926ea15f8aa6bd411a4fe4d3fbd6953e55987dde329e52e6c4ba8fce46431c86decceffac219178327652cceb1c0485d3afe02eeb7ec83d5529851435464b5d86270368f6ab55ddbfe71d980b1514db6de2e93615ca5b92018adab7a3e2dc335adba7572a923006c8825d89244d6fda15c4ded1187735455aaaf300c95eb24fdf7473dc7d9ee4956fd7fc755deed01329a5b54a4454ab1083d34b2c10ca9d99e616cf45b55f8cb8f2c83306dcde232130cb56eda35b6248cb79b7ac29bd989d579b2176fc0ff1a7c3ba40d99a24ff268cc4df19b08afe545cf27d068f779134c508507154af65568e75df297eec5eaff72d2a64cf4ef7d83c8f8849b9eaa220df81bc7d427c90e994c129df7442a47c1a53187fcb934d255c419b06598e69c4a00a76ce3d41e74ce7d420550e69330f0978152482f528505fe7889c1f1e6f3ae3b93a8adeaa2f27ea774fb032a60fe464f39844da595163610706668964af31c0b3ecffef8e5219bec323ad6610cf633016bd31d65fd8ccd66c2efc3c9bb19edd02fef58ea0e5ce42a7ff881c035319823e7d66b2c982af7fc0f34a0e2799b18052d3372c4d5a17ff6a5457409ebdbcd9c82fed67816496656fa89fd7fb2561c99f4043a880a52aa1e5015086442ac077c5fdab1ee5b35f63d3780fb12bf622b1e56be0d0fc3fecf2393139d7c6aa3dcd3e0427cc8301ba418ddf4aaeb9a6f194ffddef25a2fba1ad8ed1a4f59ed7a6e5178d77a355092d22876ff680c81bb27f64301cbb009723f9d79deacc6b", 0x1000}], 0x3, &(0x7f0000008000)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x100}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x0, 0x0, 0x0, [@private2]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x2f, 0x11, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x3f, 0x5, [0x100000001, 0x2f09, 0x7, 0xfc, 0xca3, 0x3f, 0x3f, 0x4, 0x3]}}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @enc_lim={0x4, 0x1, 0xed}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x1000, [0x1000, 0xfffffffffffffffb]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x21, 0xc, 0x1, 0x40, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3c, 0x3, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x0, 0x12, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0x89, "480f94a37ec8b24778eedbde4cc5cdd9ca81cd636b07499d03e2620f54c3ba8169797854a09d1fc68788080a7f022e56b2f6b958635d9947bf35689ee6b33d249dfff9a0ac08a7d41d02cd02521648b1515443ccb2f9e32aaa57fd9634bf729c9e5bfc90940d2d1495a6e0c1313959838beb3aecefa0632c156bb74e33a476fd2e9501f0b28cac1cb6"}, @pad1]}}}], 0x2c0}}, {{&(0x7f00000082c0)={0xa, 0x4e23, 0x6, @loopback, 0x5}, 0x1c, &(0x7f0000008380)=[{&(0x7f0000008300)="dde6a5472d48b1b6f40b9b6dee8243805d59cbd41a18387ced7a0c99c7ed192734c92b67faca8b0f864a769e5734b9eccbef60abf6872825bd6bc55b86dc4088d5bc606562428d331bbf03829b25", 0x4e}], 0x1, &(0x7f00000083c0)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x2c, 0x3, '\x00', [@ra={0x5, 0x2, 0x6}, @generic={0x1, 0x16, "072053f3f198ae00d171f3ebae6ff9878e3254e74de2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3b}}}}], 0xc0}}, {{&(0x7f0000008480)={0xa, 0x4e21, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000008540)=[{&(0x7f00000084c0)="09ec6a2edc939cee24635ce90e48963c280a7a019dc928fb85a0e3dcec36e64f0cd0c3b2d9caba79de0b83c21908635cf903b38c89594de856e973c7ef882192e665fad395829e96b9fbafe95e2cc0e8356f9674306a07bc9274caeaa965859389b42b", 0x63}], 0x1}}, {{&(0x7f0000008580)={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfffffffa}, 0x1c, &(0x7f00000095c0)=[{&(0x7f00000085c0)="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", 0x1000}], 0x1, &(0x7f0000009600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}, {{&(0x7f0000009640)={0xa, 0x4e21, 0x5, @remote, 0x2}, 0x1c, &(0x7f000000aa00)=[{&(0x7f0000009680)="2de2cd090f97556381e55561a20eb2439843170dac50d210bdfac2cf8085a181df4baf8a415e07011fab75c4b555", 0x2e}, {&(0x7f00000096c0)="d25e4c3680804c2871c7aa1b69763499a0dba5915fa063648e4e8d1cbf9c35f9889f2be87287988774861b769e887d4f4af91a1cb79ef07603f2ba00df961e8c8b33fe7356c5abb95899962208176158cf020e9c58cc8a07bbfe90bd55ee8bb8b832e1f8d5c0cb077073541581d29f396e6efc4bbd79c2b2d13f8a3c5552c79b7b2f62aa172289485f06de7f24b5a1e588a11d6c8a7fa03b85d1c7a5", 0x9c}, {&(0x7f0000009780)="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", 0x1000}, {&(0x7f000000a780)="134e16a92a207879a9b5da2c3b858f17bd0e61b19f1641c27245c0356e11981617788ef91bb200c8bdbd2d22e0c191aadb80a41b53fd6323e5d069c9861e5ff4cc71ed87fc5f4480f4b003edc3d5abb9ceb569c934a7d33eb6bfa6a9e4dec16524fee2bef4916d677956e4e084d9a27228c2234c958053337ceb1b15647a21d2d40d1be36312af84e24b6a8852571e75f415d616e853ec368e273aa3b62739a2cd7cdad6527c3d591ba2469c855d4d6dcc687a49ff03c9b7f3b88a46f95e", 0xbe}, {&(0x7f000000a840)="dcc4035876e5da687749e63b9873931392cb726fe2d0f14efb70", 0x1a}, {&(0x7f000000a880)="30489ae1fc378af61500", 0xa}, {&(0x7f000000a8c0)="18e7b64898376c28e5ba6fef38abd426ef7a9bf6b903fe36d15dac37fd420882ec055b9f7c91925c72a9c73d59db46b721aab76a7b849abf5e8043a7a647f8d83090277403760d6c8b3293d62e26243159fc73c712ac43f6a97e1f38cc49ca1fb3a2aa1716fecaa6a08eba9f68b5a047071ef451bd41ac728bf4b7e2171a73149f13e19dec2d6af0fd735381eea887f43261a7b163804d6637a00fb929024407757acb37da7161bd97ab343275206e86d6e8173c32f80a428f4aa44195df07d1d829d90ab67a37eb1142e3da817c836e007e9199da78977cc4", 0xd9}, {&(0x7f000000a9c0)="098f638ea8dae88187de2b3bfd6fa12bc115ecfe265270cc", 0x18}], 0x8, &(0x7f000000aa80)=[@hopopts={{0x180, 0x29, 0x36, {0x2, 0x2c, '\x00', [@pad1, @ra={0x5, 0x2, 0x200}, @generic={0x40, 0xe3, "c9d8c7c02bae4b1d239d55d3714b8b7c01ee81aa6f99decc2b4f16b41f7616da7e57c4ff19470be8d9747b0b179f0f25d64bb829037093a2bc36793053e48c16092758f74eb183ed5322fe272bddb8bd5dc4b641769f39c97b8bfd522467a52cf97bb675692a641573d1c10733481d8fcc828dae0c0ecba35e12a1357a545ddba883b0abf7b564bb640cb0741b3eabd6aad4f4f2518de42569ba3403339ff96c0d8d93dac0044c5ee8baf6efb42625235c49ab93d00be861d377361de3f75486b0b6b6ea3f2fb55df5dfa2b04a53d86064f2da2104c19c9be31144f9ae95f4ab79f323"}, @ra={0x5, 0x2, 0xff}, @generic={0x9, 0x74, "517e70e6c01025460606c959ea4f3c2c1105500cc510819755b0b4f652f03a7f4f36142ef717c66722a11e8b650415c3fa4c9d2e8a76a2d083c5fb8f87ee5fc1baef37922dd9d65a49574cfc669a7f882755e9719e5290d9462d8e30ef38652ff1dea18f861eacd20d92ee60d6b2deadd75facfb"}]}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x3b, 0x29, '\x00', [@generic={0x2e, 0xfb, "bdc1871d98fe600f8fd5b0763af72991a98a02de5548dcc24d360b38aa25af6ec2d147969f86a24263dd2fa748bb04fed0dacfe7da6cd07c69191fb038abf0bfcef2fe7774965769c76d2b7a3efc5112b75aecc82e1835fe6b6925c39754d76c9aa65a6833239ef2dbcd92c5998c84840f03d28321fd22b0d9fb20f4be5ad62bb65191bad34294457b93555c68baa3decb53b490aa475e39f1201456eb100786fcfb92d9388b3673d65e3bfee0d0efa68e938a0d9dba271ac992bd9de3ce240db5b2a03f24f0bda473ec86132bbc32e15cf789376cb274feeff65d9f914d7d195e55c54fe464dc24d2023ef6b20950dba3424928e10339eb52b3cc"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @empty}, @enc_lim, @hao={0xc9, 0x10, @mcast2}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x38, 0x5, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x6, [0x10001]}}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x3f, 0x1, [0xff]}}]}}}], 0x328}}, {{&(0x7f000000adc0)={0xa, 0x4e20, 0x6, @local, 0x8000}, 0x1c, &(0x7f000000ae80)=[{&(0x7f000000ae00)="8f093c27feb20add4e624ac886a287b7ea1969aa78be0787549c1c1de789b4cf7f5f22899f0c88aa8769ba69d7dd01f038c58b409fcaebae8e3fb3bfa1d7ca402a40bde4f2da348983df0ed43a51161fe4928b4172a4ce064b4f1cc54286e0999d23b808c452b05d4afeca24e83d04", 0x6f}], 0x1, &(0x7f000000aec0)=[@dstopts_2292={{0xb0, 0x29, 0x4, {0xc, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0xffffffc0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x3f, 0xff, [0x2, 0xffffffff, 0x0, 0x7fffffff, 0x7ff, 0x9, 0xccd7, 0x900, 0x4]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x4, [0x1, 0xfffffffffffffffa]}}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x8, [0xffffffffffff0c04, 0x10000]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x27, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x62, 0x12, 0x0, 0x5, 0x0, [@private1, @local, @mcast2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}}], 0x1d8}}, {{&(0x7f000000b0c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe3e}, 0x1c, &(0x7f000000b540)=[{&(0x7f000000b100)="51854c15d42b48707b6e5e764c3fc424062e4d5c1ec2d12b3a0f125c9053e5646b680cfefa45559a2238285705896d0af5ca05db1bd0d8bd7fc06c15b2f4abf0a7331da05d5ec91780294c5e870c5b50ecd36b14ab6718100f1a6a34026c04424411254a7c90d25159e200b5531ef5d99087c9dd16aa9dfbb036aa469a9749ce7a68cb13be633515126fd8479529fd77eac5174d7b67095f019253bc65a2717566be09bad4fe2753bdd91649375cbb723d417eeeb8d6bc0d13194d1b7e1a694518", 0xc1}, {&(0x7f000000b200)="06c49b91527a162229ad5dacf9513b7b36de84b131e860a7e1361713bf2fbc19b21db4b5080163625967e14922c97db17116d785c9039ffa1e4cf48a4d7556a04c2f0ba9c7d3c1cdb3ba7335e639c35199e5a88a771e6bee7712db885f2237b14dbcd55ec630ba88606b0bb2c3bdb98109db47bd3c2d9c139d72f2ab0b0b791fa7cd2a953a950cf0c3cfd245b7a9dc8cb5ed7d40ecbe09d8aead22", 0x9b}, {&(0x7f000000b2c0)="61e167bd42d25d1cc6593e42046a104c5961503c10c82f870686e972c00b123d20cb70fae396a8145b474725fc8e6c3dc8383fd800c82c6ecf340574e16bc394d041fece43bd07ba861694400e2b3d4c0ba0b5f3fbf3602d6f69dab7ed819a366e693075bfa6528e79e68fd6eb6f7c56a863fac603c8a5da9098412b9e8ed48ea4577a782a02975e5059abc4c2c130a4942b38cab38f18475b71bb82dc9c2589c9685415807815ddf9", 0xa9}, {&(0x7f000000b380)="481da234ad9cdbbbf8e6b46152e7c1a54bed93607f6911bfd5f021335113c6d712696eae952a2545e0e4e8f3009e8a9bb999de5f0fecc60362d8b868459eb80cfa257bcabe0a06", 0x47}, {&(0x7f000000b400)="0456eb7d662e9123ca03bfb0b7fd5df9ae4b34561772d128c28d0680a438e97de26f7957ac24a670d21d4b54a7a6d6330058df0b10577db5d6", 0x39}, {&(0x7f000000b440)="9b48b8635615290e3cf316a4c289dd269708ef80f278cd574061c5ce3f2ea87ba816de53d871ee89829883523d63968731884454d661e2c387cf907e", 0x3c}, {&(0x7f000000b480)="8513ce706fddfcd4147dd9a466d7476967c62fdc", 0x14}, {&(0x7f000000b4c0)="2225c23fa38954ebdc1fbe83d82b95eb1bb6fc1c392980395e69295f1e71692f9193cd76f51adea477813e1123949262f97881318d612e44cfb360764d4a60cb837c941e52443ecedcb548967106d982db324addead2992ac74848d9fae9e54b555a056be5dc625c1080039e892cdb586363ebad97489ad26a0a3a124153", 0x7e}], 0x8, &(0x7f000000b5c0)=[@hopopts={{0x80, 0x29, 0x36, {0x0, 0xc, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x46, 0x9483, [0x8, 0x8, 0x534a, 0x1]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3d, 0x0, [0x4, 0x5, 0x101, 0x7]}}, @jumbo={0xc2, 0x4, 0x101}, @ra={0x5, 0x2, 0x8dd7}, @ra={0x5, 0x2, 0x4}, @enc_lim]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x0, 0x80, 0x0, [@mcast1, @remote]}}}], 0xe8}}], 0x7, 0x4040000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r3 = openat(0xffffffffffffffff, 0x0, 0xd0041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)=0x0) fchown(0xffffffffffffffff, 0x0, r4) setgid(r5) sendmsg$inet6(r3, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e21, 0xca, @empty, 0xc1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="0f33f325f7e6060b15b7bfc77be18786435ec0b74cbcf85f782abb503d17dab8aefda1dee86861b0c9937fff1db933891ee7fda0194fa2bc7522a91643f169c2f819afb5a79ab20c2521fd7bca46faff66338bd40bef0beb689fd8524069b17cffdd897f0597a0103b0b72d3041f84de8b561e5e6c3bc44198d91fec98404b357b638f7d3a2889254178ba740d659d075d368b14cc7a227567682c2a489d82ab40f916e52366b609f655c4149a8af28bfe249ff6947c1023c54ab5216a35421e93a7336ccb4f4c978db6e36894d3b09a700aedacc53ae2", 0xd7}, {&(0x7f0000000280)="8ae759a14672a68dd33e1da0f90dbb87573806730dd8b3e7e153b325a9912544d80ff98188caf140c7e81603a848ae5b7570aca4d849f49028505caa1cf15e8b421f68e434255c717f80c5e50f7d1aa4b98fce38a007c6245bcf107abf0d4713b10492d7d4b73e5690", 0x69}, {&(0x7f0000000080)="bb7e926fb5560e85b3940235542b4aaf4052cf159c", 0x15}], 0x3}, 0x20008000) 23:40:19 executing program 7: mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix,cache=loose,privport,access=client,dfltuid=', @ANYRESHEX, @ANYBLOB="2c6f626a5f747926621661100000", @ANYRESDEC, @ANYBLOB="a2e2b5a9bcecd58121f7e5"]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x50, 0xffffffffffffffff, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000014c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000a40)=0xe8) fchown(r0, r1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0), &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001500)=0x1c) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)=']$\x00', 0x0, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000200)={0xffffffffffffd6f3, 0xffff}) 23:40:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 17) 23:40:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, 0x0, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 1765.095782] splice_direct_to_actor+0x774/0x980 [ 1765.097027] ? _cond_resched+0x12/0x80 [ 1765.097823] ? pipe_to_sendpage+0x380/0x380 [ 1765.098706] ? selinux_file_permission+0x92/0x520 [ 1765.099701] ? do_splice_to+0x160/0x160 [ 1765.100543] ? security_file_permission+0x24e/0x570 perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 16) 23:40:19 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) openat(r2, &(0x7f0000000000)='./file0\x00', 0x10000, 0x100) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQ_RING(&(0x7f00007dc000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r1, 0x0) fork() [ 1765.101604] do_splice_direct+0x1c4/0x290 [ 1765.102594] ? splice_direct_to_actor+0x980/0x980 [ 1765.103580] ? selinux_file_permission+0x92/0x520 [ 1765.104586] ? security_file_permission+0x24e/0x570 [ 1765.105639] vfs_copy_file_range+0x4f8/0x1290 [ 1765.106567] ? generic_file_rw_checks+0x240/0x240 [ 1765.107574] ? __fget_files+0x296/0x4c0 [ 1765.108405] __do_sys_copy_file_range+0x193/0x420 [ 1765.109382] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.109618] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1765.110332] ? ksys_write+0x1a9/0x260 [ 1765.110353] ? __ia32_sys_read+0xb0/0xb0 [ 1765.110383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.114543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.115609] do_syscall_64+0x33/0x40 [ 1765.116370] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.117414] RIP: 0033:0x7f050f7e0b19 [ 1765.118176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.121933] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.123499] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1765.124948] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.126399] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.127861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.129310] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 [ 1765.133101] FAULT_INJECTION: forcing a failure. [ 1765.133101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.135582] CPU: 1 PID: 26854 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1765.136996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.137334] FAULT_INJECTION: forcing a failure. [ 1765.137334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.138674] Call Trace: [ 1765.138693] dump_stack+0x107/0x167 [ 1765.138719] should_fail.cold+0x5/0xa [ 1765.138744] __alloc_pages_nodemask+0x182/0x600 [ 1765.138770] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1765.138788] ? lock_downgrade+0x6d0/0x6d0 [ 1765.138806] ? lock_acquire+0x197/0x470 [ 1765.138850] alloc_pages_vma+0xbb/0x410 [ 1765.138878] shmem_alloc_page+0x10f/0x1e0 [ 1765.138898] ? shmem_init_inode+0x20/0x20 [ 1765.138952] ? percpu_counter_add_batch+0x8b/0x140 [ 1765.138978] ? __vm_enough_memory+0x184/0x360 [ 1765.139007] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1765.152563] ? shmem_unuse_inode+0xf60/0xf60 [ 1765.153479] shmem_file_read_iter+0x2a6/0xbb0 [ 1765.154419] ? shmem_get_link+0x440/0x440 [ 1765.155281] ? iov_iter_pipe+0xf1/0x2a0 [ 1765.156104] generic_file_splice_read+0x455/0x6d0 [ 1765.157089] ? pipe_to_user+0x170/0x170 [ 1765.157902] ? _cond_resched+0x12/0x80 [ 1765.158722] ? lockdep_init_map_type+0x2c7/0x780 [ 1765.159710] ? pipe_to_user+0x170/0x170 [ 1765.160528] do_splice_to+0x10e/0x160 [ 1765.161310] splice_direct_to_actor+0x2fe/0x980 [ 1765.162288] ? pipe_to_sendpage+0x380/0x380 [ 1765.163196] ? do_splice_to+0x160/0x160 [ 1765.164029] ? security_file_permission+0x24e/0x570 [ 1765.165078] do_splice_direct+0x1c4/0x290 [ 1765.165942] ? splice_direct_to_actor+0x980/0x980 [ 1765.166937] ? selinux_file_permission+0x92/0x520 [ 1765.167950] ? security_file_permission+0x24e/0x570 [ 1765.169008] vfs_copy_file_range+0x4f8/0x1290 [ 1765.169963] ? generic_file_rw_checks+0x240/0x240 [ 1765.170963] ? __fget_files+0x296/0x4c0 [ 1765.171822] __do_sys_copy_file_range+0x193/0x420 [ 1765.172809] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.173770] ? ksys_write+0x1a9/0x260 [ 1765.174548] ? __ia32_sys_read+0xb0/0xb0 [ 1765.175388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.176451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.177505] do_syscall_64+0x33/0x40 [ 1765.178262] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.179318] RIP: 0033:0x7f0aae61ab19 [ 1765.180078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.183810] RSP: 002b:00007f0aabb6f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.185351] RAX: ffffffffffffffda RBX: 00007f0aae72e020 RCX: 00007f0aae61ab19 [ 1765.186797] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.188260] RBP: 00007f0aabb6f1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.189711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.191158] R13: 00007fff40ae45af R14: 00007f0aabb6f300 R15: 0000000000022000 [ 1765.192790] CPU: 0 PID: 26852 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1765.194215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.195913] Call Trace: [ 1765.196455] dump_stack+0x107/0x167 [ 1765.197204] should_fail.cold+0x5/0xa [ 1765.197987] __alloc_pages_nodemask+0x182/0x600 [ 1765.198937] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1765.200173] ? lock_downgrade+0x6d0/0x6d0 [ 1765.201025] ? lock_acquire+0x197/0x470 [ 1765.201862] alloc_pages_vma+0xbb/0x410 [ 1765.202689] shmem_alloc_page+0x10f/0x1e0 [ 1765.203572] ? shmem_init_inode+0x20/0x20 [ 1765.204449] ? percpu_counter_add_batch+0x8b/0x140 [ 1765.205457] ? __vm_enough_memory+0x184/0x360 [ 1765.206373] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1765.207484] ? shmem_unuse_inode+0xf60/0xf60 [ 1765.208395] shmem_file_read_iter+0x2a6/0xbb0 [ 1765.209324] ? shmem_get_link+0x440/0x440 [ 1765.210170] ? iov_iter_pipe+0xf1/0x2a0 [ 1765.210984] generic_file_splice_read+0x455/0x6d0 [ 1765.211982] ? pipe_to_user+0x170/0x170 [ 1765.212796] ? _cond_resched+0x12/0x80 [ 1765.213621] ? lockdep_init_map_type+0x2c7/0x780 [ 1765.214590] ? pipe_to_user+0x170/0x170 [ 1765.215426] do_splice_to+0x10e/0x160 [ 1765.216204] splice_direct_to_actor+0x2fe/0x980 [ 1765.217157] ? pipe_to_sendpage+0x380/0x380 [ 1765.218047] ? do_splice_to+0x160/0x160 [ 1765.218861] ? security_file_permission+0x24e/0x570 [ 1765.219908] do_splice_direct+0x1c4/0x290 [ 1765.220751] ? splice_direct_to_actor+0x980/0x980 [ 1765.221731] ? selinux_file_permission+0x92/0x520 [ 1765.222720] ? security_file_permission+0x24e/0x570 [ 1765.223778] vfs_copy_file_range+0x4f8/0x1290 [ 1765.224708] ? generic_file_rw_checks+0x240/0x240 [ 1765.225697] ? __fget_files+0x296/0x4c0 [ 1765.226529] __do_sys_copy_file_range+0x193/0x420 [ 1765.227547] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.228506] ? ksys_write+0x1a9/0x260 [ 1765.229278] ? __ia32_sys_read+0xb0/0xb0 [ 1765.230111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.231173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.232238] do_syscall_64+0x33/0x40 [ 1765.232999] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.234047] RIP: 0033:0x7fcbfd904b19 [ 1765.234802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.238567] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.240130] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1765.241574] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.243024] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.244496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.245951] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:40:19 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x00\b\'x\xe0\x1c\xaa\x00\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fH\xb8\xd9\xd7\b\x00\x00\x00\xd2\x94\a\xb5\xea\x85\xffG/\xf9\n\thK\xb2\x8d\x1e\x03Zi\xfes\x82\xc7D\xcca\xd0\xba\xa8N\xbc\x95\xb65[\x18\x1d\b\xb1\x02mi\x04\xe5_\xff\x89>\xec\xfc<\x02DFf\x0e\xde\x8e\af\xa8\x9d[p\r@c\x1d<\x83r]3\x9d\xf4\x94\xd5\xc8B\x9e\x99\xe6\xe3A\x94\xd4\xf0\xe3\xdcz\xcb\x8d\xeeB\x8f\x92-\x9e\x19w\x89c`\xfd\x0e\xec\xcd\x05\xd4\xe1\xb8z\xab\xab\x8f\xa6\xd7\x8e\x19\x06\xd9y\xcf\xb7sQ\t%\x87\xfe\xf7_\x06Y\xe1\f\xc2?\x8c\x01`\xeb\x1aQ 0l\xc3\xb1>\xb5\x80\xa5co\xf1\x8b\x84\x1b7VA\x9cv\xde Y\xa7\xb6\x96\xcf\x86H\xfa\x81\xe8@\xe86\'s\xdbJ\x8dJ\x14\xfbH.\'\xf1\x1d\xb5@\xda\xa7\x10`\x85:\x80Iy\x9e\xfe\xf4^(\x94%B`\x92F\x15K\t\f\x1c\x1bw5\xf6\xb4/q\x1f\x7f\x0f\xa7\x86\xe0?b\xe0\xc4\xa6o@]\xd5\xe7\xf9M\xadas%2\x125-/\xb8\xdc\x1a\xf9\x85\xc3\x8bw\r\xc5\xc3\x017\xbc\xc7\x99\xfc\xdf\x92\xf4\xc3\xa6o\xe2&l\x1d\xf8\xf1\x9fK\xf8\"OQ\x9bq\x92<\x02X\x0e\x0eul \x85\x1c6\x7f\xbd\xf7\xd2\x8a', 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) splice(r1, &(0x7f0000000000)=0x3, r0, &(0x7f0000000040)=0x2, 0xd, 0xd) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r2, &(0x7f0000000340)="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", 0xfb) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1765.404161] EXT4-fs: error -4 creating inode table initialization thread 23:40:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1765.452293] EXT4-fs (loop7): mount failed 23:40:19 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:19 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 3) 23:40:19 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 18) 23:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="d48a74bf9e32cd7c5b4ef52be027cc", 0xf}, {&(0x7f0000000180)="bc46c5955cb9a39eb8d6a86ebe1b38fd28fb83f42b0c9dd22e4217feed4616457c9598f185112c6aaab08a618847afddf5d50296d1e677781effb3abf1c32515b936a11cc498e4125598433b8715b8859d6185b9fdec54a2749911a02d8cace466f9fa8ac501588510bccc5b89467cebb511770d56c7603be0854d4cf47a44180f7f28c3c8230012cabf423636f56b027c84dc688f15e6e0dca115a5076ef610373d70d5d7240efe7319f516c38f1eb9719cd1e4acf408e1ada15012ae7e6a1135716447d419e9eec81fa87eaee791b3f5", 0xd1}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="2000000000000000290000003600000088000000000000000103000000000000180000000000000029000000390000002b000106000000001400000000000000648129000000080000000100010000000000"], 0x50}, 0x40) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:40:19 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 17) [ 1765.647812] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1765.685906] FAULT_INJECTION: forcing a failure. [ 1765.685906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.688912] CPU: 0 PID: 27175 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1765.690361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.692098] Call Trace: [ 1765.692650] dump_stack+0x107/0x167 [ 1765.693418] should_fail.cold+0x5/0xa [ 1765.694224] __alloc_pages_nodemask+0x182/0x600 [ 1765.695197] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1765.696429] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1765.697929] ? lock_downgrade+0x6d0/0x6d0 [ 1765.698774] ? lock_acquire+0x197/0x470 [ 1765.699624] alloc_pages_vma+0xbb/0x410 [ 1765.700446] shmem_alloc_page+0x10f/0x1e0 [ 1765.701296] ? shmem_init_inode+0x20/0x20 [ 1765.702179] ? percpu_counter_add_batch+0x8b/0x140 [ 1765.703189] ? __vm_enough_memory+0x184/0x360 [ 1765.704149] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1765.705320] ? shmem_unuse_inode+0xf60/0xf60 [ 1765.706241] shmem_file_read_iter+0x2a6/0xbb0 [ 1765.707191] ? shmem_get_link+0x440/0x440 [ 1765.708062] ? iov_iter_pipe+0xf1/0x2a0 [ 1765.708903] generic_file_splice_read+0x455/0x6d0 [ 1765.709899] ? pipe_to_user+0x170/0x170 [ 1765.710716] ? _cond_resched+0x12/0x80 [ 1765.711558] ? lockdep_init_map_type+0x2c7/0x780 [ 1765.712530] ? pipe_to_user+0x170/0x170 [ 1765.713349] do_splice_to+0x10e/0x160 [ 1765.714133] splice_direct_to_actor+0x2fe/0x980 [ 1765.715101] ? pipe_to_sendpage+0x380/0x380 [ 1765.716013] ? do_splice_to+0x160/0x160 [ 1765.716833] ? security_file_permission+0x24e/0x570 [ 1765.717876] do_splice_direct+0x1c4/0x290 [ 1765.718015] FAULT_INJECTION: forcing a failure. [ 1765.718015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.718723] ? splice_direct_to_actor+0x980/0x980 [ 1765.718741] ? selinux_file_permission+0x92/0x520 [ 1765.718769] ? security_file_permission+0x24e/0x570 [ 1765.718809] vfs_copy_file_range+0x4f8/0x1290 [ 1765.718844] ? generic_file_rw_checks+0x240/0x240 [ 1765.726123] ? __fget_files+0x296/0x4c0 [ 1765.726971] __do_sys_copy_file_range+0x193/0x420 [ 1765.727971] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.728942] ? ksys_write+0x1a9/0x260 [ 1765.729731] ? __ia32_sys_read+0xb0/0xb0 [ 1765.730568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.731655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.732725] do_syscall_64+0x33/0x40 [ 1765.733491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.734539] RIP: 0033:0x7f0aae61ab19 [ 1765.735310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.739097] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.740685] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1765.742137] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.743600] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.745056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.746506] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1765.748013] CPU: 1 PID: 27179 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1765.749481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.751156] Call Trace: [ 1765.751713] dump_stack+0x107/0x167 [ 1765.752465] should_fail.cold+0x5/0xa [ 1765.753252] __alloc_pages_nodemask+0x182/0x600 [ 1765.754205] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1765.754309] FAULT_INJECTION: forcing a failure. [ 1765.754309] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.755427] ? lock_downgrade+0x6d0/0x6d0 [ 1765.755447] ? lock_acquire+0x197/0x470 [ 1765.755491] alloc_pages_vma+0xbb/0x410 [ 1765.755521] shmem_alloc_page+0x10f/0x1e0 [ 1765.755546] ? shmem_init_inode+0x20/0x20 [ 1765.761956] ? percpu_counter_add_batch+0x8b/0x140 [ 1765.762993] ? __vm_enough_memory+0x184/0x360 [ 1765.763927] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1765.765055] ? shmem_unuse_inode+0xf60/0xf60 [ 1765.765964] shmem_file_read_iter+0x2a6/0xbb0 [ 1765.766921] ? shmem_get_link+0x440/0x440 [ 1765.767779] ? iov_iter_pipe+0xf1/0x2a0 [ 1765.768659] generic_file_splice_read+0x455/0x6d0 [ 1765.769633] ? pipe_to_user+0x170/0x170 [ 1765.770452] ? _cond_resched+0x12/0x80 [ 1765.771251] ? lockdep_init_map_type+0x2c7/0x780 [ 1765.772235] ? pipe_to_user+0x170/0x170 [ 1765.773035] do_splice_to+0x10e/0x160 [ 1765.773814] splice_direct_to_actor+0x2fe/0x980 [ 1765.774763] ? pipe_to_sendpage+0x380/0x380 [ 1765.775658] ? do_splice_to+0x160/0x160 [ 1765.776468] ? security_file_permission+0x24e/0x570 [ 1765.777502] do_splice_direct+0x1c4/0x290 [ 1765.778347] ? splice_direct_to_actor+0x980/0x980 [ 1765.779331] ? selinux_file_permission+0x92/0x520 [ 1765.780326] ? security_file_permission+0x24e/0x570 [ 1765.781359] vfs_copy_file_range+0x4f8/0x1290 [ 1765.782294] ? generic_file_rw_checks+0x240/0x240 [ 1765.783275] ? __fget_files+0x296/0x4c0 [ 1765.784124] __do_sys_copy_file_range+0x193/0x420 [ 1765.785110] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.786081] ? ksys_write+0x1a9/0x260 [ 1765.786857] ? __ia32_sys_read+0xb0/0xb0 [ 1765.787703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.788803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.789861] do_syscall_64+0x33/0x40 [ 1765.790626] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.791685] RIP: 0033:0x7fcbfd904b19 [ 1765.792447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.796180] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.797742] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1765.799191] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.800651] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.802105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.803573] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1765.805059] CPU: 0 PID: 27176 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1765.806506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1765.808214] Call Trace: [ 1765.808755] dump_stack+0x107/0x167 [ 1765.809507] should_fail.cold+0x5/0xa [ 1765.810296] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1765.811410] should_failslab+0x5/0x20 [ 1765.812194] __kmalloc_node+0x76/0x420 [ 1765.813004] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1765.814033] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1765.815059] ? trace_hardirqs_on+0x5b/0x180 [ 1765.815967] kmem_cache_alloc_trace+0x169/0x320 23:40:19 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 23:40:19 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000080)=0x400002, 0x4) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r0 = fsmount(0xffffffffffffffff, 0x1, 0xf4) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x2e9, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0xfffffffffffffcb8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x10000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x44) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000f00", @ANYRES16, @ANYBLOB="01000000000000000000040000002f3320ac325b00070073797374656d5f753a5f696e697472635f657865635f743a7330000008000500ac1e0001050008"], 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1765.816928] alloc_pipe_info+0x10a/0x590 [ 1765.817944] splice_direct_to_actor+0x774/0x980 [ 1765.818882] ? _cond_resched+0x12/0x80 [ 1765.819691] ? pipe_to_sendpage+0x380/0x380 [ 1765.820568] ? selinux_file_permission+0x92/0x520 [ 1765.821528] ? do_splice_to+0x160/0x160 [ 1765.822339] ? security_file_permission+0x24e/0x570 [ 1765.823399] do_splice_direct+0x1c4/0x290 [ 1765.824247] ? splice_direct_to_actor+0x980/0x980 [ 1765.825225] ? selinux_file_permission+0x92/0x520 [ 1765.826223] ? security_file_permission+0x24e/0x570 [ 1765.827256] vfs_copy_file_range+0x4f8/0x1290 [ 1765.828198] ? generic_file_rw_checks+0x240/0x240 [ 1765.829189] ? __fget_files+0x296/0x4c0 [ 1765.830042] __do_sys_copy_file_range+0x193/0x420 [ 1765.831047] ? vfs_copy_file_range+0x1290/0x1290 [ 1765.832029] ? ksys_write+0x1a9/0x260 [ 1765.832821] ? __ia32_sys_read+0xb0/0xb0 [ 1765.833650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1765.834759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1765.835817] do_syscall_64+0x33/0x40 [ 1765.836599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1765.837634] RIP: 0033:0x7f050f7e0b19 [ 1765.838397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1765.842164] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1765.843726] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1765.845181] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1765.846628] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1765.848101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.849555] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 23:40:32 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 4) 23:40:32 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:32 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 19) 23:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) fcntl$setflags(r1, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setgid(0x0) 23:40:32 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x9}, 0x2100, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:40:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) pread64(r0, &(0x7f0000000040)=""/30, 0x1e, 0x0) 23:40:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 18) 23:40:32 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x433a}, &(0x7f000024e000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40a, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\bmUax']) r2 = socket$packet(0x11, 0x1, 0x300) pread64(r2, &(0x7f0000000180)=""/254, 0xfe, 0x5) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x2401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x2b}, r6}, 0x14) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000080), 0x4) sendfile(r3, r4, &(0x7f0000000080)=0x7ff, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) ftruncate(r3, 0x800) fork() socket$packet(0x11, 0x1, 0x300) [ 1778.668982] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1778.673472] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1778.679497] FAULT_INJECTION: forcing a failure. [ 1778.679497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1778.681132] CPU: 1 PID: 27304 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1778.681907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.682855] Call Trace: [ 1778.683155] dump_stack+0x107/0x167 [ 1778.683576] should_fail.cold+0x5/0xa [ 1778.684013] __alloc_pages_nodemask+0x182/0x600 [ 1778.684525] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1778.685193] ? lock_downgrade+0x6d0/0x6d0 [ 1778.685647] ? lock_acquire+0x197/0x470 [ 1778.686100] alloc_pages_vma+0xbb/0x410 [ 1778.686543] shmem_alloc_page+0x10f/0x1e0 [ 1778.686999] ? shmem_init_inode+0x20/0x20 [ 1778.687477] ? percpu_counter_add_batch+0x8b/0x140 [ 1778.688040] ? __vm_enough_memory+0x184/0x360 [ 1778.688536] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1778.689140] ? shmem_unuse_inode+0xf60/0xf60 [ 1778.689633] shmem_file_read_iter+0x2a6/0xbb0 [ 1778.690145] ? shmem_get_link+0x440/0x440 [ 1778.690611] ? shmem_get_link+0x440/0x440 [ 1778.691090] generic_file_splice_read+0x455/0x6d0 [ 1778.691654] ? pipe_to_user+0x170/0x170 [ 1778.692100] ? _cond_resched+0x5d/0x80 [ 1778.692553] ? lockdep_init_map_type+0x2c7/0x780 [ 1778.693080] ? pipe_to_user+0x170/0x170 [ 1778.693524] do_splice_to+0x10e/0x160 [ 1778.693958] splice_direct_to_actor+0x2fe/0x980 [ 1778.694485] ? pipe_to_sendpage+0x380/0x380 [ 1778.694976] ? do_splice_to+0x160/0x160 [ 1778.695429] ? security_file_permission+0x24e/0x570 [ 1778.696004] do_splice_direct+0x1c4/0x290 [ 1778.696466] ? splice_direct_to_actor+0x980/0x980 [ 1778.697021] ? selinux_file_permission+0x92/0x520 [ 1778.697565] ? security_file_permission+0x24e/0x570 [ 1778.698131] vfs_copy_file_range+0x4f8/0x1290 [ 1778.698638] ? generic_file_rw_checks+0x240/0x240 [ 1778.699178] ? __fget_files+0x296/0x4c0 [ 1778.699653] __do_sys_copy_file_range+0x193/0x420 [ 1778.700209] ? vfs_copy_file_range+0x1290/0x1290 [ 1778.700745] ? ksys_write+0x1a9/0x260 [ 1778.701169] ? __ia32_sys_read+0xb0/0xb0 [ 1778.701626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1778.702217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.702803] do_syscall_64+0x33/0x40 [ 1778.703222] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1778.703817] RIP: 0033:0x7f0aae61ab19 [ 1778.704235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.706285] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1778.707138] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1778.707942] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1778.708747] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1778.709548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.710349] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1778.723384] FAULT_INJECTION: forcing a failure. [ 1778.723384] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.725979] CPU: 0 PID: 27302 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1778.727377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.729055] Call Trace: [ 1778.729593] dump_stack+0x107/0x167 [ 1778.730335] should_fail.cold+0x5/0xa [ 1778.731111] ? create_object.isra.0+0x3a/0xa20 [ 1778.732065] should_failslab+0x5/0x20 [ 1778.732837] kmem_cache_alloc+0x5b/0x310 [ 1778.733675] create_object.isra.0+0x3a/0xa20 [ 1778.734568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1778.735650] __kmalloc+0x16e/0x390 [ 1778.736392] alloc_pipe_info+0x1e5/0x590 [ 1778.737239] splice_direct_to_actor+0x774/0x980 [ 1778.738174] ? _cond_resched+0x12/0x80 [ 1778.738988] ? pipe_to_sendpage+0x380/0x380 [ 1778.739869] ? selinux_file_permission+0x92/0x520 [ 1778.740865] ? do_splice_to+0x160/0x160 [ 1778.741686] ? security_file_permission+0x24e/0x570 [ 1778.742707] do_splice_direct+0x1c4/0x290 [ 1778.743590] ? splice_direct_to_actor+0x980/0x980 [ 1778.744565] ? selinux_file_permission+0x92/0x520 [ 1778.745566] ? security_file_permission+0x24e/0x570 [ 1778.746592] vfs_copy_file_range+0x4f8/0x1290 [ 1778.747549] ? generic_file_rw_checks+0x240/0x240 [ 1778.748531] ? __fget_files+0x296/0x4c0 [ 1778.749373] __do_sys_copy_file_range+0x193/0x420 [ 1778.750351] ? vfs_copy_file_range+0x1290/0x1290 [ 1778.751328] ? ksys_write+0x1a9/0x260 [ 1778.752102] ? __ia32_sys_read+0xb0/0xb0 [ 1778.752942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1778.753991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.755061] do_syscall_64+0x33/0x40 [ 1778.755839] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1778.756897] RIP: 0033:0x7f050f7e0b19 [ 1778.757647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.761415] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1778.762964] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1778.764472] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1778.765945] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1778.767417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.768903] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 23:40:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x400, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000040)=0x1) setgid(0x0) [ 1778.786921] FAULT_INJECTION: forcing a failure. [ 1778.786921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1778.789939] CPU: 0 PID: 27294 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1778.791366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.793092] Call Trace: [ 1778.793638] dump_stack+0x107/0x167 [ 1778.794401] should_fail.cold+0x5/0xa [ 1778.795192] __alloc_pages_nodemask+0x182/0x600 [ 1778.796189] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1778.797419] ? lock_downgrade+0x6d0/0x6d0 [ 1778.798278] ? lock_acquire+0x197/0x470 [ 1778.799118] alloc_pages_vma+0xbb/0x410 [ 1778.799978] shmem_alloc_page+0x10f/0x1e0 [ 1778.800826] ? shmem_init_inode+0x20/0x20 [ 1778.801737] ? percpu_counter_add_batch+0x8b/0x140 [ 1778.802754] ? __vm_enough_memory+0x184/0x360 [ 1778.803718] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1778.804847] ? shmem_unuse_inode+0xf60/0xf60 [ 1778.805770] shmem_file_read_iter+0x2a6/0xbb0 [ 1778.806694] ? shmem_get_link+0x440/0x440 [ 1778.807548] ? iov_iter_pipe+0xf1/0x2a0 [ 1778.808355] generic_file_splice_read+0x455/0x6d0 [ 1778.809327] ? pipe_to_user+0x170/0x170 [ 1778.810121] ? _cond_resched+0x12/0x80 [ 1778.810921] ? lockdep_init_map_type+0x2c7/0x780 [ 1778.811881] ? pipe_to_user+0x170/0x170 [ 1778.812681] do_splice_to+0x10e/0x160 [ 1778.813465] splice_direct_to_actor+0x2fe/0x980 [ 1778.814421] ? pipe_to_sendpage+0x380/0x380 [ 1778.815314] ? do_splice_to+0x160/0x160 [ 1778.816147] ? security_file_permission+0x24e/0x570 [ 1778.817189] do_splice_direct+0x1c4/0x290 [ 1778.818022] ? splice_direct_to_actor+0x980/0x980 [ 1778.819019] ? selinux_file_permission+0x92/0x520 [ 1778.820000] ? security_file_permission+0x24e/0x570 [ 1778.821016] vfs_copy_file_range+0x4f8/0x1290 [ 1778.821944] ? generic_file_rw_checks+0x240/0x240 [ 1778.822925] ? __fget_files+0x296/0x4c0 [ 1778.823770] __do_sys_copy_file_range+0x193/0x420 [ 1778.824748] ? vfs_copy_file_range+0x1290/0x1290 [ 1778.825710] ? ksys_write+0x1a9/0x260 [ 1778.826472] ? __ia32_sys_read+0xb0/0xb0 [ 1778.827305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1778.828385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.829455] do_syscall_64+0x33/0x40 [ 1778.830204] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1778.831247] RIP: 0033:0x7fcbfd904b19 [ 1778.832004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.835782] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1778.837325] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1778.838776] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1778.840236] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1778.841709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.843168] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:40:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a3136efd6eca826e30d4ecab4853920930b34524ed706d87eaf867a3a68a91510ba4bd72eb189d5d8ab918658e9b4fb83222d814e350d3a4d263ad9fa1c322f0497eae5a95ff2056949a4e5e79f31ef10db653d940c56522619adf83c5c0664fd6247b03779452bfbeac5a2552ab8345e75a8f941cf811487"], 0x76) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x0, 0xfffffffd}) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r4 = io_uring_setup(0x5960, &(0x7f0000000380)={0x0, 0x8dc0, 0x2, 0x1, 0x76, 0x0, r1}) sendfile(0xffffffffffffffff, r4, &(0x7f00000002c0)=0x6, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40900, 0xa0) openat(r5, &(0x7f0000000340)='./file0/file1\x00', 0x1800, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf7, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) fchown(r2, 0xee01, 0xffffffffffffffff) lseek(r3, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, 0x0, 0x200f5ef, 0x0) 23:40:33 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:33 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 20) 23:40:33 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x7, 0x6, 0x0, 0xfffffffffffffff7, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_config_ext={0x5b, 0xffffffff}, 0x2, 0x0, 0x9, 0x6, 0x4b50, 0x898, 0x4, 0x0, 0x2, 0x0, 0x43f}, 0x0, 0xc, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001902bf10fd1ff4a99df6734efdf5f21237838640000", @ANYRES32=r3, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r4, 0x10000000) 23:40:33 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 5) [ 1778.995669] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1779.008117] FAULT_INJECTION: forcing a failure. [ 1779.008117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1779.009708] CPU: 1 PID: 27707 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1779.010444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1779.011346] Call Trace: [ 1779.011649] dump_stack+0x107/0x167 [ 1779.012049] should_fail.cold+0x5/0xa [ 1779.012456] __alloc_pages_nodemask+0x182/0x600 [ 1779.012957] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1779.013591] ? lock_downgrade+0x6d0/0x6d0 [ 1779.014029] ? lock_acquire+0x197/0x470 [ 1779.014474] alloc_pages_vma+0xbb/0x410 [ 1779.014912] shmem_alloc_page+0x10f/0x1e0 [ 1779.015384] ? shmem_init_inode+0x20/0x20 [ 1779.015849] ? percpu_counter_add_batch+0x8b/0x140 [ 1779.016371] ? __vm_enough_memory+0x184/0x360 [ 1779.016852] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1779.017455] ? shmem_unuse_inode+0xf60/0xf60 [ 1779.017940] shmem_file_read_iter+0x2a6/0xbb0 [ 1779.018424] ? shmem_get_link+0x440/0x440 [ 1779.018862] ? iov_iter_pipe+0xf1/0x2a0 [ 1779.019290] generic_file_splice_read+0x455/0x6d0 [ 1779.019808] ? pipe_to_user+0x170/0x170 [ 1779.020230] ? _cond_resched+0x12/0x80 [ 1779.020655] ? lockdep_init_map_type+0x2c7/0x780 [ 1779.021176] ? pipe_to_user+0x170/0x170 [ 1779.021603] do_splice_to+0x10e/0x160 [ 1779.022014] splice_direct_to_actor+0x2fe/0x980 [ 1779.022515] ? pipe_to_sendpage+0x380/0x380 [ 1779.022974] ? do_splice_to+0x160/0x160 [ 1779.023402] ? security_file_permission+0x24e/0x570 [ 1779.023946] do_splice_direct+0x1c4/0x290 [ 1779.024380] ? splice_direct_to_actor+0x980/0x980 [ 1779.024888] ? selinux_file_permission+0x92/0x520 [ 1779.025403] ? security_file_permission+0x24e/0x570 [ 1779.025946] vfs_copy_file_range+0x4f8/0x1290 [ 1779.026420] ? generic_file_rw_checks+0x240/0x240 [ 1779.026936] ? __fget_files+0x296/0x4c0 [ 1779.027377] __do_sys_copy_file_range+0x193/0x420 [ 1779.027902] ? vfs_copy_file_range+0x1290/0x1290 [ 1779.028399] ? ksys_write+0x1a9/0x260 [ 1779.028804] ? __ia32_sys_read+0xb0/0xb0 [ 1779.029236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1779.029802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1779.030377] do_syscall_64+0x33/0x40 [ 1779.030779] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1779.031322] RIP: 0033:0x7f0aae61ab19 [ 1779.031730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1779.033669] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1779.034475] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1779.035231] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1779.036014] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1779.036771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1779.037541] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:40:33 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 1779.069303] FAULT_INJECTION: forcing a failure. [ 1779.069303] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.072012] CPU: 0 PID: 27720 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1779.073481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1779.075165] Call Trace: [ 1779.075765] dump_stack+0x107/0x167 [ 1779.076526] should_fail.cold+0x5/0xa [ 1779.077366] ? alloc_pipe_info+0x1e5/0x590 [ 1779.078250] should_failslab+0x5/0x20 [ 1779.079032] __kmalloc+0x72/0x390 [ 1779.079774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1779.080821] alloc_pipe_info+0x1e5/0x590 [ 1779.081664] splice_direct_to_actor+0x774/0x980 [ 1779.082632] ? _cond_resched+0x12/0x80 [ 1779.083437] ? pipe_to_sendpage+0x380/0x380 [ 1779.084354] ? selinux_file_permission+0x92/0x520 [ 1779.085349] ? do_splice_to+0x160/0x160 [ 1779.086171] ? security_file_permission+0x24e/0x570 [ 1779.087213] do_splice_direct+0x1c4/0x290 [ 1779.088103] ? splice_direct_to_actor+0x980/0x980 [ 1779.089130] ? selinux_file_permission+0x92/0x520 [ 1779.090170] ? security_file_permission+0x24e/0x570 [ 1779.091249] vfs_copy_file_range+0x4f8/0x1290 [ 1779.092228] ? generic_file_rw_checks+0x240/0x240 [ 1779.093255] ? __fget_files+0x296/0x4c0 [ 1779.094120] __do_sys_copy_file_range+0x193/0x420 [ 1779.095146] ? vfs_copy_file_range+0x1290/0x1290 [ 1779.096178] ? ksys_write+0x1a9/0x260 [ 1779.096978] ? __ia32_sys_read+0xb0/0xb0 [ 1779.097825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1779.098893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1779.099974] do_syscall_64+0x33/0x40 [ 1779.100755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1779.101817] RIP: 0033:0x7f050f7e0b19 [ 1779.102598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1779.106397] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1779.107991] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1779.109449] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1779.110910] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1779.112393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.113871] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 23:40:47 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:40:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) fork() 23:40:47 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x7, 0x6, 0x0, 0xfffffffffffffff7, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_config_ext={0x5b, 0xffffffff}, 0x2, 0x0, 0x9, 0x6, 0x4b50, 0x898, 0x4, 0x0, 0x2, 0x0, 0x43f}, 0x0, 0xc, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001902bf10fd1ff4a99df6734efdf5f21237838640000", @ANYRES32=r3, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r4, 0x10000000) 23:40:47 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 19) 23:40:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 6) [ 1793.166510] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1793.170403] FAULT_INJECTION: forcing a failure. [ 1793.170403] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.171821] CPU: 1 PID: 27841 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1793.172615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 23:40:47 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 21) 23:40:47 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/srcutree', 0x20000, 0xa0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f00000002c0)={0x3, 0xc3, 0x1, 0x89}) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0xe, 0x0, 0xea}, &(0x7f00001a0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3d41, &(0x7f0000000080)={0x0, 0x267f, 0x2, 0x1, 0x39}, &(0x7f00009cf000/0x1000)=nil, &(0x7f0000597000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0xc0045878, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1793.173558] Call Trace: [ 1793.174008] dump_stack+0x107/0x167 [ 1793.174455] should_fail.cold+0x5/0xa [ 1793.174885] ? create_object.isra.0+0x3a/0xa20 [ 1793.175424] should_failslab+0x5/0x20 [ 1793.175862] kmem_cache_alloc+0x5b/0x310 [ 1793.176322] create_object.isra.0+0x3a/0xa20 [ 1793.176819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1793.177404] __kmalloc+0x16e/0x390 [ 1793.177817] alloc_pipe_info+0x1e5/0x590 [ 1793.178282] splice_direct_to_actor+0x774/0x980 [ 1793.178809] ? _cond_resched+0x12/0x80 [ 1793.179248] ? pipe_to_sendpage+0x380/0x380 [ 1793.179746] ? selinux_file_permission+0x92/0x520 [ 1793.180300] ? do_splice_to+0x160/0x160 [ 1793.180756] ? security_file_permission+0x24e/0x570 [ 1793.181340] do_splice_direct+0x1c4/0x290 [ 1793.181841] ? splice_direct_to_actor+0x980/0x980 [ 1793.182405] ? selinux_file_permission+0x92/0x520 [ 1793.182981] ? security_file_permission+0x24e/0x570 [ 1793.183587] vfs_copy_file_range+0x4f8/0x1290 [ 1793.184134] ? generic_file_rw_checks+0x240/0x240 [ 1793.184712] ? __fget_files+0x296/0x4c0 [ 1793.185194] __do_sys_copy_file_range+0x193/0x420 [ 1793.185751] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.186314] ? ksys_write+0x1a9/0x260 [ 1793.186768] ? __ia32_sys_read+0xb0/0xb0 [ 1793.187253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.187899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.188072] FAULT_INJECTION: forcing a failure. [ 1793.188072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.188515] do_syscall_64+0x33/0x40 [ 1793.191340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.191962] RIP: 0033:0x7f050f7e0b19 [ 1793.192404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.194586] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.195482] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1793.196339] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.197183] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.198030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.198868] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 [ 1793.199836] CPU: 0 PID: 27842 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1793.201257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.202938] Call Trace: [ 1793.203486] dump_stack+0x107/0x167 [ 1793.204266] should_fail.cold+0x5/0xa [ 1793.205046] __alloc_pages_nodemask+0x182/0x600 [ 1793.206015] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1793.207254] ? lock_downgrade+0x6d0/0x6d0 [ 1793.208121] ? lock_acquire+0x197/0x470 [ 1793.208957] alloc_pages_vma+0xbb/0x410 [ 1793.209786] shmem_alloc_page+0x10f/0x1e0 [ 1793.210640] ? shmem_init_inode+0x20/0x20 [ 1793.211526] ? percpu_counter_add_batch+0x8b/0x140 [ 1793.212546] ? __vm_enough_memory+0x184/0x360 [ 1793.213461] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1793.214589] ? shmem_unuse_inode+0xf60/0xf60 [ 1793.215502] shmem_file_read_iter+0x2a6/0xbb0 [ 1793.216473] ? shmem_get_link+0x440/0x440 [ 1793.217326] ? iov_iter_pipe+0xf1/0x2a0 [ 1793.218135] generic_file_splice_read+0x455/0x6d0 [ 1793.219117] ? pipe_to_user+0x170/0x170 [ 1793.219932] ? _cond_resched+0x12/0x80 [ 1793.220742] ? lockdep_init_map_type+0x2c7/0x780 [ 1793.221724] ? pipe_to_user+0x170/0x170 [ 1793.222531] do_splice_to+0x10e/0x160 [ 1793.223315] splice_direct_to_actor+0x2fe/0x980 [ 1793.224305] ? pipe_to_sendpage+0x380/0x380 [ 1793.225203] ? do_splice_to+0x160/0x160 [ 1793.226018] ? security_file_permission+0x24e/0x570 [ 1793.227044] do_splice_direct+0x1c4/0x290 [ 1793.227936] ? splice_direct_to_actor+0x980/0x980 [ 1793.228926] ? selinux_file_permission+0x92/0x520 [ 1793.229915] ? security_file_permission+0x24e/0x570 [ 1793.230962] vfs_copy_file_range+0x4f8/0x1290 [ 1793.231898] ? generic_file_rw_checks+0x240/0x240 [ 1793.232892] ? __fget_files+0x296/0x4c0 [ 1793.233723] __do_sys_copy_file_range+0x193/0x420 [ 1793.234740] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.235739] ? ksys_write+0x1a9/0x260 [ 1793.236521] ? __ia32_sys_read+0xb0/0xb0 [ 1793.237358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.238419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.239487] do_syscall_64+0x33/0x40 [ 1793.240259] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.241291] RIP: 0033:0x7f0aae61ab19 [ 1793.242051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.245832] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.247386] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1793.248866] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.250326] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.251175] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1793.251773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.251787] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1793.300318] FAULT_INJECTION: forcing a failure. [ 1793.300318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.303163] CPU: 0 PID: 27837 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1793.304612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.306321] Call Trace: [ 1793.306868] dump_stack+0x107/0x167 [ 1793.307641] should_fail.cold+0x5/0xa [ 1793.308435] __alloc_pages_nodemask+0x182/0x600 [ 1793.309408] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1793.310655] ? lock_downgrade+0x6d0/0x6d0 [ 1793.311508] ? lock_acquire+0x197/0x470 [ 1793.312380] alloc_pages_vma+0xbb/0x410 [ 1793.313198] shmem_alloc_page+0x10f/0x1e0 [ 1793.314055] ? shmem_init_inode+0x20/0x20 [ 1793.314935] ? percpu_counter_add_batch+0x8b/0x140 [ 1793.315946] ? __vm_enough_memory+0x184/0x360 [ 1793.316889] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1793.318022] ? shmem_unuse_inode+0xf60/0xf60 [ 1793.318955] shmem_file_read_iter+0x2a6/0xbb0 [ 1793.319892] ? shmem_get_link+0x440/0x440 [ 1793.320759] ? iov_iter_pipe+0xf1/0x2a0 [ 1793.321575] generic_file_splice_read+0x455/0x6d0 [ 1793.322567] ? pipe_to_user+0x170/0x170 [ 1793.323395] ? _cond_resched+0x12/0x80 [ 1793.324254] ? lockdep_init_map_type+0x2c7/0x780 [ 1793.325253] ? pipe_to_user+0x170/0x170 [ 1793.326076] do_splice_to+0x10e/0x160 [ 1793.326884] splice_direct_to_actor+0x2fe/0x980 [ 1793.327864] ? pipe_to_sendpage+0x380/0x380 [ 1793.328770] ? do_splice_to+0x160/0x160 [ 1793.329596] ? security_file_permission+0x24e/0x570 [ 1793.330639] do_splice_direct+0x1c4/0x290 [ 1793.331506] ? splice_direct_to_actor+0x980/0x980 [ 1793.332524] ? selinux_file_permission+0x92/0x520 [ 1793.333524] ? security_file_permission+0x24e/0x570 [ 1793.334589] vfs_copy_file_range+0x4f8/0x1290 [ 1793.335535] ? generic_file_rw_checks+0x240/0x240 [ 1793.336565] ? __fget_files+0x296/0x4c0 [ 1793.337425] __do_sys_copy_file_range+0x193/0x420 [ 1793.338441] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.339411] ? ksys_write+0x1a9/0x260 [ 1793.340208] ? __ia32_sys_read+0xb0/0xb0 [ 1793.341058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.342131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.343212] do_syscall_64+0x33/0x40 [ 1793.344004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.345061] RIP: 0033:0x7fcbfd904b19 [ 1793.345840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.349615] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.351187] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1793.352665] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.354143] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.355608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.357109] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:40:47 executing program 6: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() dup(r0) 23:40:47 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:40:47 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 7) 23:40:47 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 20) 23:40:47 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 22) 23:40:47 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x7, 0x6, 0x0, 0xfffffffffffffff7, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_config_ext={0x5b, 0xffffffff}, 0x2, 0x0, 0x9, 0x6, 0x4b50, 0x898, 0x4, 0x0, 0x2, 0x0, 0x43f}, 0x0, 0xc, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001902bf10fd1ff4a99df6734efdf5f21237838640000", @ANYRES32=r3, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r4, 0x10000000) [ 1793.679246] FAULT_INJECTION: forcing a failure. [ 1793.679246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.682240] CPU: 1 PID: 28056 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1793.683731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.685483] Call Trace: [ 1793.686050] dump_stack+0x107/0x167 [ 1793.686831] should_fail.cold+0x5/0xa [ 1793.687660] __alloc_pages_nodemask+0x182/0x600 [ 1793.688670] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1793.689956] ? lock_downgrade+0x6d0/0x6d0 [ 1793.690847] ? lock_acquire+0x197/0x470 [ 1793.691723] alloc_pages_vma+0xbb/0x410 [ 1793.692580] shmem_alloc_page+0x10f/0x1e0 [ 1793.693466] ? shmem_init_inode+0x20/0x20 [ 1793.694384] ? percpu_counter_add_batch+0x8b/0x140 [ 1793.695434] ? __vm_enough_memory+0x184/0x360 [ 1793.696417] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1793.697583] ? shmem_unuse_inode+0xf60/0xf60 [ 1793.698535] ? avc_has_perm+0xc5/0x1b0 [ 1793.699359] ? avc_has_perm+0x108/0x1b0 [ 1793.700218] shmem_file_read_iter+0x2a6/0xbb0 [ 1793.701175] ? do_syscall_64+0x33/0x40 [ 1793.702024] ? shmem_get_link+0x440/0x440 [ 1793.702909] ? iov_iter_pipe+0xf1/0x2a0 [ 1793.703785] generic_file_splice_read+0x455/0x6d0 [ 1793.704810] ? pipe_to_user+0x170/0x170 [ 1793.705657] ? _cond_resched+0x12/0x80 [ 1793.706507] ? lockdep_init_map_type+0x2c7/0x780 [ 1793.707523] ? pipe_to_user+0x170/0x170 [ 1793.708377] do_splice_to+0x10e/0x160 [ 1793.709187] splice_direct_to_actor+0x2fe/0x980 [ 1793.710186] ? pipe_to_sendpage+0x380/0x380 [ 1793.711110] ? do_splice_to+0x160/0x160 [ 1793.711969] ? security_file_permission+0x24e/0x570 [ 1793.713056] do_splice_direct+0x1c4/0x290 [ 1793.713937] ? splice_direct_to_actor+0x980/0x980 [ 1793.714958] ? selinux_file_permission+0x92/0x520 [ 1793.715984] ? security_file_permission+0x24e/0x570 [ 1793.717058] vfs_copy_file_range+0x4f8/0x1290 [ 1793.718006] ? generic_file_rw_checks+0x240/0x240 [ 1793.719022] ? __fget_files+0x296/0x4c0 [ 1793.719898] __do_sys_copy_file_range+0x193/0x420 [ 1793.720936] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.721929] ? ksys_write+0x1a9/0x260 [ 1793.722732] ? __ia32_sys_read+0xb0/0xb0 [ 1793.723585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.724702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.725805] do_syscall_64+0x33/0x40 [ 1793.726592] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.727674] RIP: 0033:0x7f050f7e0b19 [ 1793.728465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.732278] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.733876] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1793.735366] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.736879] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.736903] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1793.738354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.738367] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 [ 1793.804187] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1793.805170] FAULT_INJECTION: forcing a failure. [ 1793.805170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.808821] CPU: 0 PID: 28087 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1793.810244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.811981] Call Trace: [ 1793.812537] dump_stack+0x107/0x167 [ 1793.813280] should_fail.cold+0x5/0xa [ 1793.814071] __alloc_pages_nodemask+0x182/0x600 [ 1793.815039] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1793.816281] ? lock_downgrade+0x6d0/0x6d0 [ 1793.817124] ? lock_acquire+0x197/0x470 [ 1793.817961] alloc_pages_vma+0xbb/0x410 [ 1793.818777] shmem_alloc_page+0x10f/0x1e0 [ 1793.819650] ? shmem_init_inode+0x20/0x20 [ 1793.820390] FAULT_INJECTION: forcing a failure. [ 1793.820390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.820534] ? percpu_counter_add_batch+0x8b/0x140 [ 1793.823889] ? __vm_enough_memory+0x184/0x360 [ 1793.824819] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1793.825923] ? shmem_unuse_inode+0xf60/0xf60 [ 1793.826855] shmem_file_read_iter+0x2a6/0xbb0 [ 1793.827787] ? shmem_get_link+0x440/0x440 [ 1793.828644] ? iov_iter_pipe+0xf1/0x2a0 [ 1793.829461] generic_file_splice_read+0x455/0x6d0 [ 1793.830458] ? pipe_to_user+0x170/0x170 [ 1793.831274] ? _cond_resched+0x12/0x80 [ 1793.832104] ? lockdep_init_map_type+0x2c7/0x780 [ 1793.833080] ? pipe_to_user+0x170/0x170 [ 1793.833900] do_splice_to+0x10e/0x160 [ 1793.834689] splice_direct_to_actor+0x2fe/0x980 [ 1793.835656] ? pipe_to_sendpage+0x380/0x380 [ 1793.836544] ? do_splice_to+0x160/0x160 [ 1793.837355] ? security_file_permission+0x24e/0x570 [ 1793.838393] do_splice_direct+0x1c4/0x290 [ 1793.839247] ? splice_direct_to_actor+0x980/0x980 [ 1793.840256] ? selinux_file_permission+0x92/0x520 [ 1793.841263] ? security_file_permission+0x24e/0x570 [ 1793.842305] vfs_copy_file_range+0x4f8/0x1290 [ 1793.843233] ? generic_file_rw_checks+0x240/0x240 [ 1793.844228] ? __fget_files+0x296/0x4c0 [ 1793.845040] __do_sys_copy_file_range+0x193/0x420 [ 1793.846015] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.846958] ? ksys_write+0x1a9/0x260 [ 1793.847757] ? __ia32_sys_read+0xb0/0xb0 [ 1793.848581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.849607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.850677] do_syscall_64+0x33/0x40 [ 1793.851431] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.852485] RIP: 0033:0x7fcbfd904b19 [ 1793.853229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.856912] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.858470] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1793.859937] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.861401] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.862854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.864330] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1793.865857] CPU: 1 PID: 28121 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1793.867449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.869323] Call Trace: [ 1793.869928] dump_stack+0x107/0x167 [ 1793.870753] should_fail.cold+0x5/0xa [ 1793.871644] __alloc_pages_nodemask+0x182/0x600 [ 1793.872702] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1793.874046] ? lock_downgrade+0x6d0/0x6d0 [ 1793.874974] ? lock_acquire+0x197/0x470 [ 1793.875915] alloc_pages_vma+0xbb/0x410 [ 1793.876816] shmem_alloc_page+0x10f/0x1e0 [ 1793.877750] ? shmem_init_inode+0x20/0x20 [ 1793.878712] ? percpu_counter_add_batch+0x8b/0x140 [ 1793.879854] ? __vm_enough_memory+0x184/0x360 [ 1793.880858] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1793.882074] ? shmem_unuse_inode+0xf60/0xf60 [ 1793.883072] shmem_file_read_iter+0x2a6/0xbb0 [ 1793.884109] ? shmem_get_link+0x440/0x440 [ 1793.885036] ? iov_iter_pipe+0xf1/0x2a0 [ 1793.885929] generic_file_splice_read+0x455/0x6d0 [ 1793.886999] ? pipe_to_user+0x170/0x170 [ 1793.887896] ? _cond_resched+0x12/0x80 [ 1793.888785] ? lockdep_init_map_type+0x2c7/0x780 [ 1793.889839] ? pipe_to_user+0x170/0x170 [ 1793.890726] do_splice_to+0x10e/0x160 [ 1793.891573] splice_direct_to_actor+0x2fe/0x980 [ 1793.892651] ? pipe_to_sendpage+0x380/0x380 [ 1793.893612] ? do_splice_to+0x160/0x160 [ 1793.894499] ? security_file_permission+0x24e/0x570 [ 1793.895611] do_splice_direct+0x1c4/0x290 [ 1793.896545] ? splice_direct_to_actor+0x980/0x980 [ 1793.897609] ? selinux_file_permission+0x92/0x520 [ 1793.898685] ? security_file_permission+0x24e/0x570 [ 1793.899823] vfs_copy_file_range+0x4f8/0x1290 [ 1793.900825] ? generic_file_rw_checks+0x240/0x240 [ 1793.901892] ? __fget_files+0x296/0x4c0 [ 1793.902794] __do_sys_copy_file_range+0x193/0x420 [ 1793.903890] ? vfs_copy_file_range+0x1290/0x1290 [ 1793.904926] ? ksys_write+0x1a9/0x260 [ 1793.905768] ? __ia32_sys_read+0xb0/0xb0 [ 1793.906672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.907861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.909030] do_syscall_64+0x33/0x40 [ 1793.909868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1793.911026] RIP: 0033:0x7f0aae61ab19 [ 1793.911870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.915959] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1793.917631] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1793.919208] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1793.920812] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1793.922364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.923961] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:41:01 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 8) 23:41:01 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 23) 23:41:01 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x5bc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x7, 0x6, 0x0, 0xfffffffffffffff7, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x3, @perf_config_ext={0x5b, 0xffffffff}, 0x2, 0x0, 0x9, 0x6, 0x4b50, 0x898, 0x4, 0x0, 0x2, 0x0, 0x43f}, 0x0, 0xc, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001902bf10fd1ff4a99df6734efdf5f21237838640000", @ANYRES32=r3, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1000003) write$binfmt_elf64(r4, &(0x7f0000000a00)=ANY=[], 0x5bc) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r4, 0x10000000) 23:41:01 executing program 6: r0 = syz_io_uring_setup(0x39, &(0x7f00000002c0)={0x0, 0x3b37, 0x0, 0x2, 0x69}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @local, 0x104e}, 0x1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = fork() clone3(&(0x7f0000000400)={0xc0000000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x32}, &(0x7f0000000180)=""/110, 0x6e, &(0x7f0000000340)=""/132, &(0x7f0000000140)=[r2, r2, r2, r2, r2, r2, r2], 0x7}, 0x58) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r4, r0, &(0x7f0000000280)=0x76, 0x6) ptrace(0x4208, r3) 23:41:01 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:41:01 executing program 4: select(0x40, &(0x7f0000000000)={0x3f80000000000000, 0x9, 0x6, 0x1, 0x100000001, 0xffffffffc4e489d1, 0xffffffff, 0x8e}, &(0x7f0000000080)={0x3, 0x6, 0x2, 0x7ff, 0x400, 0x10001, 0x1000}, &(0x7f00000000c0)={0x7, 0x1, 0x3ff, 0x0, 0x6, 0x100000001, 0x80000001, 0x100000000}, &(0x7f0000000100)={0x77359400}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() 23:41:01 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 21) 23:41:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1807.186398] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1807.200346] FAULT_INJECTION: forcing a failure. [ 1807.200346] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.202865] CPU: 1 PID: 28379 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1807.204260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.205905] Call Trace: [ 1807.206426] dump_stack+0x107/0x167 [ 1807.207192] should_fail.cold+0x5/0xa [ 1807.207971] ? iter_file_splice_write+0x16d/0xc30 [ 1807.208931] should_failslab+0x5/0x20 [ 1807.209681] __kmalloc+0x72/0x390 [ 1807.210374] iter_file_splice_write+0x16d/0xc30 [ 1807.211326] ? atime_needs_update+0x600/0x600 [ 1807.212220] ? shmem_get_link+0x440/0x440 [ 1807.213051] ? generic_splice_sendpage+0x140/0x140 [ 1807.214039] ? pipe_to_user+0x170/0x170 [ 1807.214821] ? _cond_resched+0x12/0x80 [ 1807.215607] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.216565] ? generic_splice_sendpage+0x140/0x140 [ 1807.217554] direct_splice_actor+0x10f/0x170 [ 1807.217686] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1807.218464] splice_direct_to_actor+0x387/0x980 [ 1807.218491] ? pipe_to_sendpage+0x380/0x380 [ 1807.218516] ? do_splice_to+0x160/0x160 [ 1807.222728] ? security_file_permission+0x24e/0x570 [ 1807.223724] do_splice_direct+0x1c4/0x290 [ 1807.224562] ? splice_direct_to_actor+0x980/0x980 [ 1807.225509] ? selinux_file_permission+0x92/0x520 [ 1807.226497] ? security_file_permission+0x24e/0x570 [ 1807.227477] vfs_copy_file_range+0x4f8/0x1290 [ 1807.228376] ? generic_file_rw_checks+0x240/0x240 [ 1807.229316] ? __fget_files+0x296/0x4c0 [ 1807.230156] __do_sys_copy_file_range+0x193/0x420 [ 1807.231102] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.232034] ? ksys_write+0x1a9/0x260 [ 1807.232780] ? __ia32_sys_read+0xb0/0xb0 [ 1807.233583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.234630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.235634] do_syscall_64+0x33/0x40 [ 1807.236379] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.237370] RIP: 0033:0x7f0aae61ab19 [ 1807.238126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.241672] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.243199] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1807.244592] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.245967] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.247308] FAULT_INJECTION: forcing a failure. [ 1807.247308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1807.247370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.247391] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1807.252870] CPU: 0 PID: 28390 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1807.254450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.256334] Call Trace: [ 1807.256933] dump_stack+0x107/0x167 [ 1807.257770] should_fail.cold+0x5/0xa [ 1807.258640] __alloc_pages_nodemask+0x182/0x600 [ 1807.259721] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1807.261079] ? lock_downgrade+0x6d0/0x6d0 [ 1807.262016] ? lock_acquire+0x197/0x470 [ 1807.262939] alloc_pages_vma+0xbb/0x410 [ 1807.263879] shmem_alloc_page+0x10f/0x1e0 [ 1807.264813] ? shmem_init_inode+0x20/0x20 [ 1807.265779] ? percpu_counter_add_batch+0x8b/0x140 [ 1807.266888] ? __vm_enough_memory+0x184/0x360 [ 1807.267922] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1807.269147] ? shmem_unuse_inode+0xf60/0xf60 [ 1807.270161] shmem_file_read_iter+0x2a6/0xbb0 [ 1807.271194] ? shmem_get_link+0x440/0x440 [ 1807.272166] ? iov_iter_pipe+0xf1/0x2a0 [ 1807.273066] generic_file_splice_read+0x455/0x6d0 [ 1807.274154] ? pipe_to_user+0x170/0x170 [ 1807.275040] ? _cond_resched+0x12/0x80 [ 1807.275944] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.277012] ? pipe_to_user+0x170/0x170 [ 1807.277899] do_splice_to+0x10e/0x160 [ 1807.278753] splice_direct_to_actor+0x2fe/0x980 [ 1807.279803] ? pipe_to_sendpage+0x380/0x380 [ 1807.280773] ? do_splice_to+0x160/0x160 [ 1807.281659] ? security_file_permission+0x24e/0x570 [ 1807.282785] do_splice_direct+0x1c4/0x290 [ 1807.283710] ? splice_direct_to_actor+0x980/0x980 [ 1807.284835] ? vfs_copy_file_range+0xd5d/0x1290 [ 1807.285880] vfs_copy_file_range+0x4f8/0x1290 [ 1807.286893] ? generic_file_rw_checks+0x240/0x240 [ 1807.287981] ? __fget_files+0x296/0x4c0 [ 1807.288896] __do_sys_copy_file_range+0x193/0x420 [ 1807.289977] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.291028] ? ksys_write+0x1a9/0x260 [ 1807.291905] ? __ia32_sys_read+0xb0/0xb0 [ 1807.292815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.293974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.295120] do_syscall_64+0x33/0x40 [ 1807.295953] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.297082] RIP: 0033:0x7f050f7e0b19 [ 1807.297906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.301956] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.303631] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1807.305228] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.306800] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.308379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.309948] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 [ 1807.317481] FAULT_INJECTION: forcing a failure. [ 1807.317481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1807.320658] CPU: 0 PID: 28389 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1807.322190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.324024] Call Trace: [ 1807.324611] dump_stack+0x107/0x167 [ 1807.325422] should_fail.cold+0x5/0xa [ 1807.326279] __alloc_pages_nodemask+0x182/0x600 [ 1807.327303] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1807.328632] ? lock_downgrade+0x6d0/0x6d0 [ 1807.329558] ? lock_acquire+0x197/0x470 [ 1807.330463] alloc_pages_vma+0xbb/0x410 [ 1807.331356] shmem_alloc_page+0x10f/0x1e0 [ 1807.332305] ? shmem_init_inode+0x20/0x20 [ 1807.333263] ? percpu_counter_add_batch+0x8b/0x140 [ 1807.334351] ? __vm_enough_memory+0x184/0x360 [ 1807.335341] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1807.336538] ? shmem_unuse_inode+0xf60/0xf60 [ 1807.337521] shmem_file_read_iter+0x2a6/0xbb0 [ 1807.338514] ? shmem_get_link+0x440/0x440 [ 1807.339421] ? iov_iter_pipe+0xf1/0x2a0 [ 1807.340316] generic_file_splice_read+0x455/0x6d0 [ 1807.341363] ? pipe_to_user+0x170/0x170 [ 1807.342225] ? _cond_resched+0x12/0x80 [ 1807.343094] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.344135] ? pipe_to_user+0x170/0x170 [ 1807.345007] do_splice_to+0x10e/0x160 [ 1807.345850] splice_direct_to_actor+0x2fe/0x980 [ 1807.346877] ? pipe_to_sendpage+0x380/0x380 [ 1807.347830] ? do_splice_to+0x160/0x160 [ 1807.348697] ? security_file_permission+0x24e/0x570 [ 1807.349801] do_splice_direct+0x1c4/0x290 [ 1807.350723] ? splice_direct_to_actor+0x980/0x980 [ 1807.351778] ? selinux_file_permission+0x92/0x520 [ 1807.352884] ? security_file_permission+0x24e/0x570 [ 1807.354009] vfs_copy_file_range+0x4f8/0x1290 [ 1807.355016] ? generic_file_rw_checks+0x240/0x240 [ 1807.356099] ? __fget_files+0x296/0x4c0 [ 1807.357009] __do_sys_copy_file_range+0x193/0x420 [ 1807.358079] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.359126] ? ksys_write+0x1a9/0x260 [ 1807.359993] ? __ia32_sys_read+0xb0/0xb0 [ 1807.360900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.362066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.363213] do_syscall_64+0x33/0x40 [ 1807.364071] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.365210] RIP: 0033:0x7fcbfd904b19 [ 1807.366048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.370176] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.371894] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1807.373498] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.375121] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.376762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.378375] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 23:41:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) 23:41:01 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:41:01 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 24) 23:41:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000000080), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="355e0b58a049b3ec0596343c88a13d8222569b8a674513d325ab818a5d32a45a3a02ca9ff48afddd4c2f0d1a86cf06192aab66b91242b384a5580b683b056c517fc6fc4afad60da35fa7865784af3b71c47d6baa7e4e4b28efc302aa5127a012a3", 0x61}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f00000003c0)="b7394aa30ed6da753261e14a74d0c80201043b5c929eacb92e47ad9c013125221ed3d5e34b31a0653ef15b6648d2e6c9779cba7e24530248e3932eb9c5ca9abbff5f72108692499e65539f067630881136e9ce5d49a9f0d6965ee33f8eeb7f2d69b608c2b23f2581c77e214bb7dff516", 0x70}, {&(0x7f0000000440)="f569244bba1f915c2fc66f683659f5f5cbfd2d15e19020c7f8f0a92f127ae08d26b6f0bc4b63342fbd39747e3509048d0883816f0033b60c4846a82da8ab501c3b5ec141b8af3b6382a6f5798e8d9739751bc671a05547f0bc21d2c1bbcdd119d7439261061e5c53c6e8f768513fd6f63d7441b3286175695c0615c233be8a8f7a681d8609ee095a6e4e5814912aa0ddfd6e145f87dcab8b4dc8b56af7f659f2e84e98a6364999934f88a7b142f7c0b7d3b9df0b4ab1157aaf6a6645c3a0a4c0fad7457d188b6ac2e638fd7e70296fd3", 0xd0}, {&(0x7f0000000540)="110f6a25f798eee3e564fcb6ae0edda87bff0a683d384008be71a40f54436730e53810672b129715c2c988f5b59819e74eec65d094f66c1f4518ac6b93c8daa96cb6db6d53b15d56b5114abbfa466be0330ffbc1ff15735271783018c15fbb73a31368e24cfbbc85b471e3d30c369d16833691d2f979e01f8b18eb26733fcd110263f2465b9cc2d564", 0x89}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="d307b6055138fafdf1f8761176fa0ca5c8c01177fc9c79d4fcff867b5f987af6640ac3ecddae6fd93a6db449e7c11ec25788d48efde56c2ca4449f4526ad04873f0bee95bece014c5bc2025f94f854a0186d339394695c2c0759c94e45660f2ba488b65b93c8fb925609c54bf6e89aeae9358bf2cc90", 0x76}, {&(0x7f00000006c0)="15ba0978bff20d86e42caffabd7fbb549d9d4759bce5b71dad61ecb2b109080bc075df6be7e214e9147fbd032d44bc38e09d5dd800c9ba4d8cddc137ddc853e9bdb466e9b81bddf2504a0926197bf712b570bccc80d8b57e99629bc87545fc63a761fe760b09ab493a724b22dae63bb21d28ec95be75", 0x76}], 0x2}}, {{&(0x7f0000000780)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000001800)=[{&(0x7f00000007c0)="0b2a0bbef5c7967440fc5864287efe42e229106cd903372cebc8f12bf441343611", 0x21}, {&(0x7f0000000800)="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", 0x1000}], 0x2}}, {{&(0x7f0000001840)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001880)}, {&(0x7f00000018c0)="2fe91bea3256af6ec09fc68534a8688f33b89a90ef47dd5afeb1fcb25b6d724ffa4008ce7ef6add2bb", 0x29}, {&(0x7f0000001900)="fccf9a47bad21f8cac80e90c0c97ad7d6408756a1656bf33ac484bbb", 0x1c}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)}], 0x5}}, {{&(0x7f0000002a00)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002a40)="15e8cdb5dd80edb2c72b8f0766fa2ab80826b30e67b811d56d2e2c2eaaa12b40627fd9331fccfec0a6c284e19056fb1c0a8b3f6c800ce5d228ec20c557b3e9b9492f080511b8fd33207aea263c26970158f5df461dad283fbe2781a35a684ce7aaeedfd2a174867036f86de53de14ed1c5", 0x71}, {&(0x7f0000002ac0)="10072bf451a81e0094f9b290fae120837d80d45adcf825c1ba5ea1cc6fef8708fdd76db3355a80afb2e750fee9d5b59ccefb4b0bd5e11a4de5e19cd889b8492e4c3498991547d35b7b78b76ab4a616e5fa2a60de1c2a70b150ed08d5b347581890640c6a16685504fa6850463df21ddc0f752275040c9bce3ab7d6b0ad3a27b95e2b1f434f9e8c990269430966de53433df97fdf72e857ce4441508f28bf4d40432f89bf", 0xa4}, {&(0x7f0000002b80)="9c9005f843318dc1e07d6a7418c88452f4756113d6d4cba4cfcde6e2dd603dd615b0f505497a27703ddbbe00f23babd08afdeb4212c766dc3b648275a69f631068a36c9a8a7c9c837f55bfabd9ac20f3d13b545d7d5a4b4b004f2c8bdfa96f7684d9654d93", 0x65}], 0x3}}], 0x6, 0x200048d0) r3 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080), 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000140), 0x4) openat(0xffffffffffffffff, 0x0, 0x911526092ffeed99, 0x168) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0xa733, @mcast1, 0x1}}, 0x0, 0x0, 0x29, 0x0, "81f1ae618fe3f2efe916e1d535ef0737cd4ea0a5361b17fbbc9c4f4cb776e1f095becc659553180df7e717c3df1ff0b702dc0d7f5cca7346d300a569b202b14962ba7e3a59324273cb8fa8980a1ec57b"}, 0xd8) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) [ 1807.587984] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1807.613075] FAULT_INJECTION: forcing a failure. [ 1807.613075] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.615856] CPU: 0 PID: 28617 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1807.617279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.618986] Call Trace: [ 1807.619535] dump_stack+0x107/0x167 [ 1807.620313] should_fail.cold+0x5/0xa [ 1807.621102] ? create_object.isra.0+0x3a/0xa20 [ 1807.622051] should_failslab+0x5/0x20 [ 1807.622867] kmem_cache_alloc+0x5b/0x310 [ 1807.623694] ? igrab+0xc0/0xc0 [ 1807.624362] create_object.isra.0+0x3a/0xa20 [ 1807.625256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1807.626286] __kmalloc+0x16e/0x390 [ 1807.627017] iter_file_splice_write+0x16d/0xc30 [ 1807.627956] ? atime_needs_update+0x600/0x600 [ 1807.628857] ? shmem_get_link+0x440/0x440 [ 1807.629713] ? generic_splice_sendpage+0x140/0x140 [ 1807.630694] ? pipe_to_user+0x170/0x170 [ 1807.631496] ? _cond_resched+0x12/0x80 [ 1807.632331] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.633288] ? generic_splice_sendpage+0x140/0x140 [ 1807.634281] direct_splice_actor+0x10f/0x170 [ 1807.635169] splice_direct_to_actor+0x387/0x980 [ 1807.636129] ? pipe_to_sendpage+0x380/0x380 [ 1807.637019] ? do_splice_to+0x160/0x160 [ 1807.637840] ? security_file_permission+0x24e/0x570 [ 1807.638854] do_splice_direct+0x1c4/0x290 [ 1807.639692] ? splice_direct_to_actor+0x980/0x980 [ 1807.640694] ? selinux_file_permission+0x92/0x520 [ 1807.641674] ? security_file_permission+0x24e/0x570 [ 1807.642694] vfs_copy_file_range+0x4f8/0x1290 [ 1807.643608] ? generic_file_rw_checks+0x240/0x240 [ 1807.644584] ? __fget_files+0x296/0x4c0 [ 1807.645408] __do_sys_copy_file_range+0x193/0x420 [ 1807.646399] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.647355] ? ksys_write+0x1a9/0x260 [ 1807.648159] ? __ia32_sys_read+0xb0/0xb0 [ 1807.648992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.650046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.651085] do_syscall_64+0x33/0x40 [ 1807.651839] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.652870] RIP: 0033:0x7f0aae61ab19 [ 1807.653620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.657349] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.658878] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1807.660314] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.661760] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.663212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.664669] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 23:41:01 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 9) 23:41:01 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 22) [ 1807.767154] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1807.781120] FAULT_INJECTION: forcing a failure. [ 1807.781120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1807.783752] CPU: 0 PID: 28708 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1807.785205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.786889] Call Trace: [ 1807.787427] dump_stack+0x107/0x167 [ 1807.788188] should_fail.cold+0x5/0xa [ 1807.788977] __alloc_pages_nodemask+0x182/0x600 [ 1807.789921] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1807.791132] ? lock_downgrade+0x6d0/0x6d0 [ 1807.791980] ? lock_acquire+0x197/0x470 [ 1807.792806] alloc_pages_vma+0xbb/0x410 [ 1807.793618] shmem_alloc_page+0x10f/0x1e0 [ 1807.794454] ? shmem_init_inode+0x20/0x20 [ 1807.795338] ? percpu_counter_add_batch+0x8b/0x140 [ 1807.796376] ? __vm_enough_memory+0x184/0x360 [ 1807.797304] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1807.798413] ? shmem_unuse_inode+0xf60/0xf60 [ 1807.799329] shmem_file_read_iter+0x2a6/0xbb0 [ 1807.800261] ? shmem_get_link+0x440/0x440 [ 1807.801102] ? iov_iter_pipe+0xf1/0x2a0 [ 1807.801914] generic_file_splice_read+0x455/0x6d0 [ 1807.802893] ? pipe_to_user+0x170/0x170 [ 1807.803697] ? _cond_resched+0x12/0x80 [ 1807.804507] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.805465] ? pipe_to_user+0x170/0x170 [ 1807.806287] do_splice_to+0x10e/0x160 [ 1807.807069] splice_direct_to_actor+0x2fe/0x980 [ 1807.808055] ? pipe_to_sendpage+0x380/0x380 [ 1807.808933] ? do_splice_to+0x160/0x160 [ 1807.809751] ? security_file_permission+0x24e/0x570 [ 1807.810768] do_splice_direct+0x1c4/0x290 [ 1807.811614] ? splice_direct_to_actor+0x980/0x980 [ 1807.812592] ? selinux_file_permission+0x92/0x520 [ 1807.813588] ? security_file_permission+0x24e/0x570 [ 1807.814619] vfs_copy_file_range+0x4f8/0x1290 [ 1807.815545] ? generic_file_rw_checks+0x240/0x240 [ 1807.816550] ? __fget_files+0x296/0x4c0 [ 1807.817381] __do_sys_copy_file_range+0x193/0x420 [ 1807.818360] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.819328] ? ksys_write+0x1a9/0x260 [ 1807.820109] ? __ia32_sys_read+0xb0/0xb0 [ 1807.820954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.822009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.823083] do_syscall_64+0x33/0x40 [ 1807.823864] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.824903] RIP: 0033:0x7fcbfd904b19 [ 1807.825656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.829389] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.830929] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1807.832405] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.833882] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.835336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.836817] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1807.842155] FAULT_INJECTION: forcing a failure. [ 1807.842155] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.844492] CPU: 1 PID: 28706 Comm: syz-executor.0 Not tainted 5.10.205 #1 [ 1807.845886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.847554] Call Trace: [ 1807.848126] dump_stack+0x107/0x167 [ 1807.848895] should_fail.cold+0x5/0xa [ 1807.849688] ? create_object.isra.0+0x3a/0xa20 [ 1807.850627] should_failslab+0x5/0x20 [ 1807.851407] kmem_cache_alloc+0x5b/0x310 [ 1807.852267] create_object.isra.0+0x3a/0xa20 [ 1807.853179] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1807.854239] kmem_cache_alloc+0x159/0x310 [ 1807.855092] ? __lockdep_reset_lock+0x180/0x180 [ 1807.856077] xas_alloc+0x336/0x440 [ 1807.856825] xas_create+0x34a/0x10d0 23:41:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x5bc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x9, 0x8010, 0xffffffffffffffff, 0x8000000) fork() [ 1807.857589] ? lock_acquire+0x197/0x470 [ 1807.858649] xas_create_range+0x189/0x620 [ 1807.859532] shmem_add_to_page_cache+0x760/0x1130 [ 1807.860553] ? shmem_getattr+0x180/0x180 [ 1807.861435] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 1807.862575] ? shmem_unuse_inode+0xf60/0xf60 [ 1807.863489] ? avc_has_perm+0xc5/0x1b0 [ 1807.864303] ? avc_has_perm+0x108/0x1b0 [ 1807.865139] shmem_file_read_iter+0x2a6/0xbb0 [ 1807.866085] ? do_syscall_64+0x33/0x40 [ 1807.866916] ? shmem_get_link+0x440/0x440 [ 1807.867821] ? iov_iter_pipe+0xf1/0x2a0 [ 1807.868650] generic_file_splice_read+0x455/0x6d0 [ 1807.869651] ? pipe_to_user+0x170/0x170 [ 1807.870458] ? _cond_resched+0x12/0x80 [ 1807.871283] ? lockdep_init_map_type+0x2c7/0x780 [ 1807.872272] ? pipe_to_user+0x170/0x170 [ 1807.873089] do_splice_to+0x10e/0x160 [ 1807.873877] splice_direct_to_actor+0x2fe/0x980 [ 1807.874838] ? pipe_to_sendpage+0x380/0x380 [ 1807.875733] ? do_splice_to+0x160/0x160 [ 1807.876569] ? security_file_permission+0x24e/0x570 [ 1807.877635] do_splice_direct+0x1c4/0x290 [ 1807.878495] ? splice_direct_to_actor+0x980/0x980 [ 1807.879481] ? selinux_file_permission+0x92/0x520 [ 1807.880493] ? security_file_permission+0x24e/0x570 [ 1807.881546] vfs_copy_file_range+0x4f8/0x1290 [ 1807.882476] ? generic_file_rw_checks+0x240/0x240 [ 1807.883482] ? __fget_files+0x296/0x4c0 [ 1807.884331] __do_sys_copy_file_range+0x193/0x420 [ 1807.885338] ? vfs_copy_file_range+0x1290/0x1290 [ 1807.886308] ? ksys_write+0x1a9/0x260 [ 1807.887095] ? __ia32_sys_read+0xb0/0xb0 [ 1807.887951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.889030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.890096] do_syscall_64+0x33/0x40 [ 1807.890869] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1807.891934] RIP: 0033:0x7f050f7e0b19 [ 1807.892708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.896473] RSP: 002b:00007f050cd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1807.898055] RAX: ffffffffffffffda RBX: 00007f050f8f3f60 RCX: 00007f050f7e0b19 [ 1807.899518] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1807.900983] RBP: 00007f050cd561d0 R08: 0000000300000000 R09: 0000000000000000 [ 1807.902431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.903903] R13: 00007ffd5542a1ef R14: 00007f050cd56300 R15: 0000000000022000 23:41:02 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 23:41:02 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a53000/0x3000)=nil, 0x3000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) fork() 23:41:02 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) memfd_create(0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) lseek(r3, 0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 25) 23:41:02 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x7, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x1, 0x9e6) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 23) [ 1808.129840] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1808.156188] FAULT_INJECTION: forcing a failure. [ 1808.156188] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.158778] CPU: 1 PID: 28740 Comm: syz-executor.2 Not tainted 5.10.205 #1 [ 1808.160125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.161712] Call Trace: [ 1808.162230] dump_stack+0x107/0x167 [ 1808.162939] should_fail.cold+0x5/0xa [ 1808.163683] ? iter_file_splice_write+0x16d/0xc30 [ 1808.164637] should_failslab+0x5/0x20 [ 1808.165378] __kmalloc+0x72/0x390 [ 1808.166050] iter_file_splice_write+0x16d/0xc30 [ 1808.166924] ? atime_needs_update+0x600/0x600 [ 1808.167768] ? shmem_get_link+0x440/0x440 [ 1808.168577] ? generic_splice_sendpage+0x140/0x140 [ 1808.169524] ? pipe_to_user+0x170/0x170 [ 1808.170274] ? _cond_resched+0x12/0x80 [ 1808.171010] ? lockdep_init_map_type+0x2c7/0x780 [ 1808.171896] ? generic_splice_sendpage+0x140/0x140 [ 1808.172808] direct_splice_actor+0x10f/0x170 [ 1808.173657] splice_direct_to_actor+0x387/0x980 [ 1808.174576] ? pipe_to_sendpage+0x380/0x380 [ 1808.175405] ? do_splice_to+0x160/0x160 [ 1808.176181] ? security_file_permission+0x24e/0x570 [ 1808.177140] do_splice_direct+0x1c4/0x290 [ 1808.177925] ? splice_direct_to_actor+0x980/0x980 [ 1808.178818] ? selinux_file_permission+0x92/0x520 [ 1808.179741] ? security_file_permission+0x24e/0x570 [ 1808.180726] vfs_copy_file_range+0x4f8/0x1290 [ 1808.181595] ? generic_file_rw_checks+0x240/0x240 [ 1808.182524] ? __fget_files+0x296/0x4c0 [ 1808.183297] __do_sys_copy_file_range+0x193/0x420 [ 1808.184233] ? vfs_copy_file_range+0x1290/0x1290 [ 1808.185129] ? ksys_write+0x1a9/0x260 [ 1808.185858] ? __ia32_sys_read+0xb0/0xb0 [ 1808.186644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.187623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.188618] do_syscall_64+0x33/0x40 [ 1808.189330] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1808.190294] RIP: 0033:0x7f0aae61ab19 [ 1808.190997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.194447] RSP: 002b:00007f0aabb90188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1808.195892] RAX: ffffffffffffffda RBX: 00007f0aae72df60 RCX: 00007f0aae61ab19 [ 1808.197227] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1808.198563] RBP: 00007f0aabb901d0 R08: 0000000300000000 R09: 0000000000000000 [ 1808.199917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1808.201258] R13: 00007fff40ae45af R14: 00007f0aabb90300 R15: 0000000000022000 [ 1808.233624] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1808.261195] FAULT_INJECTION: forcing a failure. [ 1808.261195] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.265031] CPU: 0 PID: 28821 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 1808.266447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.268150] Call Trace: [ 1808.268699] dump_stack+0x107/0x167 [ 1808.269456] should_fail.cold+0x5/0xa [ 1808.270241] ? iter_file_splice_write+0x16d/0xc30 [ 1808.271225] should_failslab+0x5/0x20 [ 1808.272043] __kmalloc+0x72/0x390 [ 1808.272771] iter_file_splice_write+0x16d/0xc30 [ 1808.273707] ? atime_needs_update+0x600/0x600 [ 1808.274637] ? shmem_get_link+0x440/0x440 [ 1808.275493] ? generic_splice_sendpage+0x140/0x140 [ 1808.276504] ? pipe_to_user+0x170/0x170 [ 1808.277310] ? _cond_resched+0x12/0x80 [ 1808.278120] ? lockdep_init_map_type+0x2c7/0x780 [ 1808.279082] ? generic_splice_sendpage+0x140/0x140 [ 1808.280119] direct_splice_actor+0x10f/0x170 [ 1808.281019] splice_direct_to_actor+0x387/0x980 [ 1808.281963] ? pipe_to_sendpage+0x380/0x380 [ 1808.282843] ? do_splice_to+0x160/0x160 [ 1808.283648] ? security_file_permission+0x24e/0x570 [ 1808.284675] do_splice_direct+0x1c4/0x290 [ 1808.285518] ? splice_direct_to_actor+0x980/0x980 [ 1808.286521] vfs_copy_file_range+0x4f8/0x1290 [ 1808.287440] ? generic_file_rw_checks+0x240/0x240 [ 1808.288432] ? __fget_files+0x296/0x4c0 [ 1808.289267] __do_sys_copy_file_range+0x193/0x420 [ 1808.290254] ? vfs_copy_file_range+0x1290/0x1290 [ 1808.291208] ? ksys_write+0x1a9/0x260 [ 1808.292032] ? __ia32_sys_read+0xb0/0xb0 [ 1808.292866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.293913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.294962] do_syscall_64+0x33/0x40 [ 1808.295717] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1808.296784] RIP: 0033:0x7fcbfd904b19 [ 1808.297547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.301282] RSP: 002b:00007fcbfae7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1808.302844] RAX: ffffffffffffffda RBX: 00007fcbfda17f60 RCX: 00007fcbfd904b19 [ 1808.304306] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1808.305746] RBP: 00007fcbfae7a1d0 R08: 0000000300000000 R09: 0000000000000000 [ 1808.307186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1808.308659] R13: 00007fffb3b3cfcf R14: 00007fcbfae7a300 R15: 0000000000022000 [ 1809.057102] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 1809.058297] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.205 #1 [ 1809.059032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.059942] Call Trace: [ 1809.060227] dump_stack+0x107/0x167 [ 1809.060616] dump_header+0x106/0x655 [ 1809.061020] oom_kill_process.cold+0x10/0x15 [ 1809.061498] out_of_memory+0x1149/0x1440 [ 1809.061945] ? oom_killer_disable+0x280/0x280 [ 1809.062431] ? mutex_trylock+0x237/0x2b0 [ 1809.062879] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1809.063514] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1809.064160] ? lock_acquire+0x177/0x470 [ 1809.064585] ? warn_alloc+0x190/0x190 [ 1809.065023] __alloc_pages_nodemask+0x51d/0x600 [ 1809.065522] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1809.066170] ? find_get_entry+0x2c8/0x740 [ 1809.066625] alloc_pages_current+0x187/0x280 [ 1809.067107] __page_cache_alloc+0x2d2/0x360 [ 1809.067570] pagecache_get_page+0x2c7/0xc80 [ 1809.068056] filemap_fault+0x177d/0x2210 [ 1809.068513] ? read_cache_page_gfp+0x30/0x30 [ 1809.068999] ? handle_mm_fault+0x28b1/0x3500 [ 1809.069485] ? lock_downgrade+0x6d0/0x6d0 [ 1809.069943] ext4_filemap_fault+0x87/0xc0 [ 1809.070407] __do_fault+0x113/0x410 [ 1809.070803] handle_mm_fault+0x1e53/0x3500 [ 1809.071274] ? find_held_lock+0x2c/0x110 [ 1809.071719] ? __pmd_alloc+0x5e0/0x5e0 [ 1809.072155] ? vmacache_find+0x55/0x2a0 [ 1809.072591] ? vmacache_update+0xce/0x140 [ 1809.073054] do_user_addr_fault+0x56e/0xc60 [ 1809.073537] exc_page_fault+0xa2/0x1a0 [ 1809.073965] ? asm_exc_page_fault+0x8/0x30 [ 1809.074434] asm_exc_page_fault+0x1e/0x30 [ 1809.074882] RIP: 0033:0x7f09f0b96250 [ 1809.075298] Code: Unable to access opcode bytes at RIP 0x7f09f0b96226. [ 1809.076029] RSP: 002b:00007fff5375ccb8 EFLAGS: 00010206 [ 1809.076597] RAX: 0000000000000000 RBX: 0000560f091b6440 RCX: 00007f09f0d69320 [ 1809.077354] RDX: 00007f09f0d68d01 RSI: 0000560f091b6630 RDI: 0000560f091afd60 [ 1809.078107] RBP: 00007fff5375ce20 R08: 0000000000000066 R09: 0000000000000001 [ 1809.078858] R10: 0000000000000002 R11: 000000000034276c R12: 0000560f091b6440 [ 1809.079612] R13: a5d24d326ed7755a R14: 00007fff5375cd58 R15: 00007fff5375cdc8 [ 1809.080424] Mem-Info: [ 1809.080719] active_anon:6947 inactive_anon:67641 isolated_anon:210 [ 1809.080719] active_file:184 inactive_file:95 isolated_file:2 [ 1809.080719] unevictable:0 dirty:7 writeback:0 [ 1809.080719] slab_reclaimable:6999 slab_unreclaimable:66363 [ 1809.080719] mapped:69731 shmem:127 pagetables:3639 bounce:0 [ 1809.080719] free:4032 free_pcp:22 free_cma:0 [ 1809.084925] Node 0 active_anon:27788kB inactive_anon:270984kB active_file:736kB inactive_file:380kB unevictable:0kB isolated(anon):420kB isolated(file):8kB mapped:278840kB dirty:28kB writeback:0kB shmem:508kB writeback_tmp:0kB kernel_stack:6592kB all_unreclaimable? no [ 1809.087537] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.090301] lowmem_reserve[]: 0 1616 1616 1616 [ 1809.090824] Node 0 DMA32 free:9644kB min:5456kB low:7108kB high:8760kB reserved_highatomic:0KB active_anon:27536kB inactive_anon:271152kB active_file:972kB inactive_file:948kB unevictable:0kB writepending:0kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:14556kB bounce:0kB free_pcp:48kB local_pcp:16kB free_cma:0kB [ 1809.093853] lowmem_reserve[]: 0 0 0 0 [ 1809.094284] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6480kB [ 1809.095681] Node 0 DMA32: 693*4kB (ME) 324*8kB (UME) 114*16kB (UME) 25*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7988kB [ 1809.097184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.098094] 370 total pagecache pages [ 1809.098498] 0 pages in swap cache [ 1809.098889] Swap cache stats: add 0, delete 0, find 0/0 [ 1809.099452] Free swap = 0kB [ 1809.099783] Total swap = 0kB [ 1809.100117] 524158 pages RAM [ 1809.100436] 0 pages HighMem/MovableOnly [ 1809.100867] 105060 pages reserved [ 1809.101234] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 1809.104051] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:31940kB, anon-rss:868kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:84kB oom_score_adj:-250 [ 1809.115608] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1809.116738] CPU: 1 PID: 20189 Comm: syz-executor.5 Not tainted 5.10.205 #1 [ 1809.117472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.118350] Call Trace: [ 1809.118627] dump_stack+0x107/0x167 [ 1809.119014] dump_header+0x106/0x655 [ 1809.119409] oom_kill_process.cold+0x10/0x15 [ 1809.119884] out_of_memory+0x1149/0x1440 [ 1809.120323] ? oom_killer_disable+0x280/0x280 [ 1809.120803] ? mutex_trylock+0x237/0x2b0 [ 1809.121243] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1809.121880] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1809.122504] ? lock_acquire+0x177/0x470 [ 1809.122932] ? warn_alloc+0x190/0x190 [ 1809.123365] __alloc_pages_nodemask+0x51d/0x600 [ 1809.123866] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1809.124500] ? find_get_entry+0x2c8/0x740 [ 1809.124948] alloc_pages_current+0x187/0x280 [ 1809.125415] __page_cache_alloc+0x2d2/0x360 [ 1809.125878] pagecache_get_page+0x2c7/0xc80 [ 1809.126340] filemap_fault+0x177d/0x2210 [ 1809.126776] ? read_cache_page_gfp+0x30/0x30 [ 1809.127244] ? replace_page_cache_page+0x1200/0x1200 [ 1809.127781] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1809.128350] ext4_filemap_fault+0x87/0xc0 [ 1809.128792] __do_fault+0x113/0x410 [ 1809.129180] handle_mm_fault+0x1e53/0x3500 [ 1809.129634] ? __pmd_alloc+0x5e0/0x5e0 [ 1809.130052] ? vmacache_find+0x55/0x2a0 [ 1809.130476] do_user_addr_fault+0x56e/0xc60 [ 1809.130947] exc_page_fault+0xa2/0x1a0 [ 1809.131361] ? asm_exc_page_fault+0x8/0x30 [ 1809.131812] asm_exc_page_fault+0x1e/0x30 [ 1809.132252] RIP: 0033:0x7f0ecb9e361f [ 1809.132645] Code: Unable to access opcode bytes at RIP 0x7f0ecb9e35f5. [ 1809.133331] RSP: 002b:00007ffd9c20a400 EFLAGS: 00010202 [ 1809.133896] RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000 [ 1809.134655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1809.135406] RBP: 00007ffd9c20a45c R08: 0000000000000000 R09: 00007ffd9c250080 [ 1809.136167] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 1809.136930] R13: 00000000001b94a1 R14: 0000000000000013 R15: 00007ffd9c20a4c0 [ 1809.137736] Mem-Info: [ 1809.138020] active_anon:6962 inactive_anon:67627 isolated_anon:259 [ 1809.138020] active_file:151 inactive_file:76 isolated_file:1 [ 1809.138020] unevictable:0 dirty:0 writeback:0 [ 1809.138020] slab_reclaimable:7000 slab_unreclaimable:66353 [ 1809.138020] mapped:69682 shmem:121 pagetables:3645 bounce:0 [ 1809.138020] free:2925 free_pcp:75 free_cma:0 [ 1809.141346] Node 0 active_anon:27848kB inactive_anon:271012kB active_file:604kB inactive_file:304kB unevictable:0kB isolated(anon):532kB isolated(file):4kB mapped:278728kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:6592kB all_unreclaimable? no [ 1809.143801] Node 0 DMA free:6480kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.146554] lowmem_reserve[]: 0 1616 1616 1616 [ 1809.147060] Node 0 DMA32 free:4716kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:27764kB inactive_anon:271012kB active_file:604kB inactive_file:308kB unevictable:0kB writepending:0kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:14580kB bounce:0kB free_pcp:1192kB local_pcp:0kB free_cma:0kB [ 1809.150095] lowmem_reserve[]: 0 0 0 0 [ 1809.150532] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6480kB [ 1809.151927] Node 0 DMA32: 409*4kB (UME) 209*8kB (UME) 65*16kB (UME) 12*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4732kB [ 1809.153422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.154328] 351 total pagecache pages [ 1809.154750] 0 pages in swap cache [ 1809.155119] Swap cache stats: add 0, delete 0, find 0/0 [ 1809.155689] Free swap = 0kB [ 1809.156020] Total swap = 0kB [ 1809.156345] 524158 pages RAM [ 1809.156679] 0 pages HighMem/MovableOnly [ 1809.157107] 105060 pages reserved [ 1809.157479] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=20189,uid=0 [ 1809.159009] Out of memory (oom_kill_allocating_task): Killed process 20189 (syz-executor.5) total-vm:93280kB, anon-rss:380kB, file-rss:34860kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1809.238396] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1809.239510] CPU: 1 PID: 28823 Comm: systemd-udevd Not tainted 5.10.205 #1 [ 1809.240259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.241160] Call Trace: [ 1809.241445] dump_stack+0x107/0x167 [ 1809.241837] dump_header+0x106/0x655 [ 1809.242247] oom_kill_process.cold+0x10/0x15 [ 1809.242718] out_of_memory+0x1149/0x1440 [ 1809.243160] ? oom_killer_disable+0x280/0x280 [ 1809.243644] ? mutex_trylock+0x237/0x2b0 [ 1809.244099] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1809.244748] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1809.245382] ? lock_acquire+0x177/0x470 [ 1809.245836] ? warn_alloc+0x190/0x190 [ 1809.246254] __alloc_pages_nodemask+0x51d/0x600 [ 1809.246763] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1809.247412] ? find_get_entry+0x2c8/0x740 [ 1809.247870] alloc_pages_current+0x187/0x280 [ 1809.248344] __page_cache_alloc+0x2d2/0x360 [ 1809.248805] pagecache_get_page+0x2c7/0xc80 [ 1809.249267] filemap_fault+0x177d/0x2210 [ 1809.249715] ? read_cache_page_gfp+0x30/0x30 [ 1809.250193] ? replace_page_cache_page+0x1200/0x1200 [ 1809.250744] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1809.251309] ext4_filemap_fault+0x87/0xc0 [ 1809.251756] __do_fault+0x113/0x410 [ 1809.252157] handle_mm_fault+0x1e53/0x3500 [ 1809.252625] ? find_held_lock+0x2c/0x110 [ 1809.253081] ? __pmd_alloc+0x5e0/0x5e0 [ 1809.253504] ? vmacache_find+0x55/0x2a0 [ 1809.253928] do_user_addr_fault+0x56e/0xc60 [ 1809.254392] exc_page_fault+0xa2/0x1a0 [ 1809.254809] ? asm_exc_page_fault+0x8/0x30 [ 1809.255253] asm_exc_page_fault+0x1e/0x30 [ 1809.255687] RIP: 0033:0x556cec99eeba [ 1809.256095] Code: Unable to access opcode bytes at RIP 0x556cec99ee90. [ 1809.256790] RSP: 002b:00007ffcb30b6970 EFLAGS: 00010246 [ 1809.257357] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001 [ 1809.258113] RDX: 0000000000000000 RSI: 0000556cec9e2f7b RDI: 0000556cee84a6b0 [ 1809.258881] RBP: 0000556cec9e2f7b R08: 0000556cec9c78f0 R09: 00007f823f937be0 [ 1809.259627] R10: 0000000000000000 R11: 0000000000000020 R12: 0000556cee84a6b0 [ 1809.260395] R13: 0000000000000011 R14: 0000000000000008 R15: 0000556cee852c41 [ 1809.261250] Mem-Info: [ 1809.261525] active_anon:6962 inactive_anon:67669 isolated_anon:7 [ 1809.261525] active_file:12 inactive_file:44 isolated_file:1 [ 1809.261525] unevictable:0 dirty:0 writeback:0 [ 1809.261525] slab_reclaimable:7000 slab_unreclaimable:66353 [ 1809.261525] mapped:69640 shmem:121 pagetables:3645 bounce:0 [ 1809.261525] free:2258 free_pcp:62 free_cma:0 [ 1809.264845] Node 0 active_anon:27848kB inactive_anon:270676kB active_file:48kB inactive_file:176kB unevictable:0kB isolated(anon):28kB isolated(file):4kB mapped:278560kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:6592kB all_unreclaimable? no [ 1809.267285] Node 0 DMA free:6480kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.270048] lowmem_reserve[]: 0 1616 1616 1616 [ 1809.270564] Node 0 DMA32 free:2552kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:27764kB inactive_anon:271012kB active_file:604kB inactive_file:308kB unevictable:0kB writepending:0kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:14580kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1809.273645] lowmem_reserve[]: 0 0 0 0 [ 1809.274077] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6480kB [ 1809.275469] Node 0 DMA32: 390*4kB (UME) 100*8kB (ME) 26*16kB (ME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2904kB [ 1809.276978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.277882] 204 total pagecache pages [ 1809.278295] 0 pages in swap cache [ 1809.278671] Swap cache stats: add 0, delete 0, find 0/0 [ 1809.279237] Free swap = 0kB [ 1809.279578] Total swap = 0kB [ 1809.279917] 524158 pages RAM [ 1809.280234] 0 pages HighMem/MovableOnly [ 1809.280663] 105060 pages reserved [ 1809.281029] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=28823,uid=0 [ 1809.282802] Out of memory (oom_kill_allocating_task): Killed process 28823 (systemd-udevd) total-vm:35752kB, anon-rss:10220kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 1809.353802] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1809.354903] CPU: 1 PID: 256 Comm: syz-fuzzer Not tainted 5.10.205 #1 [ 1809.355574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.356471] Call Trace: [ 1809.356752] dump_stack+0x107/0x167 [ 1809.357140] dump_header+0x106/0x655 [ 1809.357545] oom_kill_process.cold+0x10/0x15 [ 1809.358013] out_of_memory+0x1149/0x1440 [ 1809.358455] ? oom_killer_disable+0x280/0x280 [ 1809.358944] ? mutex_trylock+0x237/0x2b0 [ 1809.359375] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 1809.360025] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 1809.360651] ? lock_acquire+0x177/0x470 [ 1809.361075] ? warn_alloc+0x190/0x190 [ 1809.361498] __alloc_pages_nodemask+0x51d/0x600 [ 1809.361989] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1809.362622] ? find_get_entry+0x2c8/0x740 [ 1809.363072] alloc_pages_current+0x187/0x280 [ 1809.363545] __page_cache_alloc+0x2d2/0x360 [ 1809.364011] pagecache_get_page+0x2c7/0xc80 [ 1809.364475] filemap_fault+0x177d/0x2210 [ 1809.364916] ? read_cache_page_gfp+0x30/0x30 [ 1809.365379] ? replace_page_cache_page+0x1200/0x1200 [ 1809.365914] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1809.366472] ext4_filemap_fault+0x87/0xc0 [ 1809.366907] __do_fault+0x113/0x410 [ 1809.367298] handle_mm_fault+0x1e53/0x3500 [ 1809.367756] ? _copy_from_user+0xfb/0x1b0 [ 1809.368204] ? __pmd_alloc+0x5e0/0x5e0 [ 1809.368618] ? vmacache_find+0x55/0x2a0 [ 1809.369045] do_user_addr_fault+0x56e/0xc60 [ 1809.369502] exc_page_fault+0xa2/0x1a0 [ 1809.369909] ? asm_exc_page_fault+0x8/0x30 [ 1809.370353] asm_exc_page_fault+0x1e/0x30 [ 1809.370794] RIP: 0033:0x466533 [ 1809.371136] Code: Unable to access opcode bytes at RIP 0x466509. [ 1809.371771] RSP: 002b:000000c00003fe80 EFLAGS: 00010206 [ 1809.372334] RAX: ffffffffffffff92 RBX: 000000002964ab56 RCX: 0000000000466533 [ 1809.373078] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 1809.373826] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 1809.374570] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 1809.375322] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 1809.376152] Mem-Info: [ 1809.376424] active_anon:6962 inactive_anon:67669 isolated_anon:7 [ 1809.376424] active_file:12 inactive_file:44 isolated_file:1 [ 1809.376424] unevictable:0 dirty:0 writeback:0 [ 1809.376424] slab_reclaimable:7000 slab_unreclaimable:66234 [ 1809.376424] mapped:69640 shmem:121 pagetables:3645 bounce:0 [ 1809.376424] free:9950 free_pcp:455 free_cma:0 [ 1809.379749] Node 0 active_anon:27848kB inactive_anon:270676kB active_file:48kB inactive_file:176kB unevictable:0kB isolated(anon):28kB isolated(file):4kB mapped:278560kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:6560kB all_unreclaimable? yes [ 1809.382230] Node 0 DMA free:6480kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.385044] lowmem_reserve[]: 0 1616 1616 1616 [ 1809.385563] Node 0 DMA32 free:135632kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:27764kB inactive_anon:271012kB active_file:604kB inactive_file:308kB unevictable:0kB writepending:0kB present:2080640kB managed:1660484kB mlocked:0kB pagetables:14580kB bounce:0kB free_pcp:1704kB local_pcp:328kB free_cma:0kB [ 1809.388670] lowmem_reserve[]: 0 0 0 0 [ 1809.389095] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6480kB [ 1809.391343] Node 0 DMA32: 877*4kB (UME) 712*8kB (UME) 1211*16kB (UME) 567*32kB (UM) 424*64kB (U) 228*128kB (U) 116*256kB (U) 58*512kB (U) 30*1024kB (U) 1*2048kB (U) 0*4096kB = 195204kB [ 1809.393292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.394186] 204 total pagecache pages [ 1809.394597] 0 pages in swap cache [ 1809.394967] Swap cache stats: add 0, delete 0, find 0/0 [ 1809.395543] Free swap = 0kB [ 1809.395878] Total swap = 0kB [ 1809.396214] 524158 pages RAM [ 1809.396545] 0 pages HighMem/MovableOnly [ 1809.396964] 105060 pages reserved [ 1809.397334] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=256,uid=0 [ 1809.398988] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1240148kB, anon-rss:255664kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:984kB oom_score_adj:0 [ 1809.443672] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1809.446246] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 1809.465954] systemd[1]: systemd-journald.service: Consumed 3.244s CPU time. [ 1809.470218] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 1809.504498] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1809.667225] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1809.932256] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 1809.933668] systemd[1]: ssh.service: Unit process 249 (sshd) remains running after unit stopped. [ 1809.939960] systemd[1]: ssh.service: Consumed 25min 23.131s CPU time. [ 1810.141574] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 1810.144571] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'. [ 1810.151926] systemd[1]: systemd-udevd.service: Consumed 44.305s CPU time. [ 1810.172786] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. [ 1810.179148] systemd[1]: Stopped OpenBSD Secure Shell server. [ 1810.189366] systemd[1]: ssh.service: Consumed 25min 23.146s CPU time. [ 1810.196929] systemd[1]: ssh.service: Found left-over process 249 (sshd) in control group while starting unit. Ignoring. [ 1810.204320] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 1810.254797] systemd[1]: Starting OpenBSD Secure Shell server... [ 1810.261540] systemd[1]: Stopped Rule-based Manager for Device Events and Files. [ 1810.263935] systemd[1]: systemd-udevd.service: Consumed 44.305s CPU time. [ 1810.319204] systemd[1]: Starting Rule-based Manager for Device Events and Files... [ 1810.406220] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1810.412349] systemd[1]: systemd-journal-flush.service: Succeeded. [ 1810.434118] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1810.436700] systemd[1]: Stopped Journal Service. [ 1810.438154] systemd[1]: systemd-journald.service: Consumed 3.244s CPU time. [ 1810.466506] systemd[1]: Starting Journal Service... [ 1810.549150] systemd[1]: ssh.service: Found left-over process 249 (sshd) in control group while starting unit. Ignoring. [ 1810.550565] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 1810.694432] systemd[1]: Started OpenBSD Secure Shell server. [ 1810.747042] systemd-journald[28832]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1810.825327] systemd[1]: Started Rule-based Manager for Device Events and Files. [ 1811.021230] systemd[1]: Stopped target Bluetooth. [ 1811.191067] systemd[1]: Started Journal Service. [ 1811.262549] systemd-journald[28832]: Received client request to flush runtime journal. VM DIAGNOSIS: 23:41:04 Registers: info registers vcpu 0 RAX=74d674094c808d00 RBX=1ffff1100d9c12cc RCX=ffffffff8126bc3b RDX=dffffc0000000000 RSI=ffff88802b1a09c0 RDI=ffff88802b1a0000 RBP=0000000000000008 RSP=ffff88806ce09628 R8 =0000000000000000 R9 =ffffffff868616f7 R10=fffffbfff0d0c2de R11=0000000000000001 R12=ffff88802b1a0000 R13=ffff88802b1a09c0 R14=ffff88802b1a0948 R15=dffffc0000000000 RIP=ffffffff8126832b RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd1089e5e70 CR3=000000001afbe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000562a6c51c060 XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88800e3e15f0 RCX=ffffffff816eff15 RDX=ffffed1001c7c2d1 RSI=0000000000000004 RDI=ffff88800e3e1680 RBP=ffff8880ffffffff RSP=ffff8880089b7c48 R8 =0000000000000001 R9 =ffff88800e3e1683 R10=ffffed1001c7c2d0 R11=0000000000000001 R12=ffff8880089b7ca8 R13=ffff88801a865780 R14=ffff8880083f9000 R15=ffff88801a865780 RIP=ffffffff816eff1c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f92fbc004 CR3=0000000043bd0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7379732f646d65747379732f62696c2f XMM01=64766564752d646d65747379732f646d XMM02=00000000c000003e0000000000000002 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=7379732f646d65747379732f62696c2f XMM09=00000000000000000000000000000000 XMM10=00002000000000200000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000