126f67c4eb50f8b099c8837161964b0de9dd45a40c2df74cca9a1cef13133176e39adb397432bb323446a66ecb2c1e5f3236ca98a0f6229047ecd9a633fac4c8e8e4a9155afb7217d623117b7c5a1847cc3b580d4f0fa3d770f6c33bfd460a3df3bdb8923790eb59a01bcb8d98caeb49a553334990eeca31544d4398ebf480df57f4be861a6762e82f3bfc345d132b1b0b716af0a33507574b9fbc592e9339c908fd550751a820736b32445ccaa16979afcd43339b2cf56c5175df6fa1018daa8280662c95c6bf7a01997754c31d8ddb42e1e2dfe4077afb5fbd0f8ac4dc0b66c38c8685066bf30128b4156b631e0f3aeb724f7874d4139c0330699f96e0289cae14f775fb6185ad888a33e4a1936a09b1855283ed40527d8d461040b25f00563a17a7b1fb127b8f3c5c3447f98ec5269ddff4b0f7caa29aa199f14631daf5bc5aab2cadcae66e5cc68391c6c174e755fcde37d63d690b79210add57cbb62e850dfcfccde171fe3772bcd8bb16c60403bccd343cea8fd1254d9bf271eee106abed901825127b5f56c8b9696d43843f90f65a84151318a060b8ee9a3460846f46582a074ce61907aed0ed419418d5ce7361463211d419124741d6aa9dbff563580053ae4bf316d774af675c794e39b0d1521bbe713c4178f55a95c43e883c39dd616fe9d64b6aa79629db002fb4c409d4128f0320fe8079002267b94e294f52cc99c7f6ade8560afdfbfa5f4dd8444512294f666d2462c31b86e20256fbb8ca81c307192b8f8b698c3281426cc54f71c8964159804f6973ebbe9e3b5304c11a713f2e09ae7513de49b06ee12d4d8ad380984879172fc5ce1541481020d25809fac564a32226351aa542a47c3fed16c4176253a008fad8bdc9d18eabebcf483de89e9706a96fa5c1066bf40abe9d0c4138e2b829b91c340ba642a15f9d67074d2774a070df1085307684c969168f79cb3c82b038565b8af178a494293edb2212c1301ad869a1bf73b3620d634267ab3f09ab349c3e3abd482bc2f200476ecf1907c610a1d9d89e2aa73157ca2251b358444fcc608c0c52c1f335e5342fc2ee8d11d2679754c81ff3e53267c384f093c8019adcfb92dadec35c72db6a014f65eec7938f7cfb34e3dcc5b5fe37c57389940c62a5e6fd320987c949410b0748d0b534541cc760ec436b9ca0d30a9e7114fc05e48ea77d8388afe179190d770e762781958fbe7479b472579f752cb2b33d61ba7f18e8916378b3a8eb53e52f9eee6cff2f0a049c1a7667f92505d6a57a946edac79248fe74123f639f5d3a3b9992c99be30e65f39f8a91d129d46821114f5d4a06ab76ad491cff5181612134cdbdfed9387e7d1ac85ac163347c4f3f05df25cf8e6557c3f873e5c14f557e52246d562c99c359aeb9991410e52b5f44ccad5f0f624b25b5f279ffe295cb8c2aa6c1fab06e561847a5140192e0777a4c049061ef5804796b6edb6734bcdc04837a54ebc9554828efa8b15272c3cf55b93aff3740e35100b83dacd9375b793cbf01ac67f57c4c7c3168da9fb0a44a70c0cc51a4c7c3583cc6e066438d03592233eec4e195cdda3c90d38e86abdcd967e6bc538850d1fcfde2d63dd0f939a2cb286a7ebf24c19843771ccc04e5292ebfaa7e10b60240898a54058e6126986159db669506ad09d141bd12525bf0d1808b88c66c1361e45c2695b96e9fd31a3af53a791a4922aeaace9ce364c142f6fda10e4b91d5612cd98778f2852492f2df681f8742c8c367950ec668b97a50b559131c5f65a538e5c37d76e3c54056b145c8c74b1ad5d4afd22a363b22ef83acffe21ba472fe7d61a7ad74d1968ca52609b6556e17529109316e1b2be18ec9421f1e6b2eb95d96fef28763adf0dd1564c416c3885407fd51842bd95767540a8e259b8e735af1b7c2dcd8888429ced596d97932ae5963772f5bad05e6d34c75f5c7de13c6b7c67c72c86c166e96eaf88646dab64bab1b1be04df732c5b30385f771673eb2ff8a21c9a7967680a4954e273536087b34440a1f08e97797712a01faa300cbef639aea3bb14ec445c234d40adff89afeedeea9f0a2d19f492bc53f4847eca978dbd5c93a973b3114970cac95db2c40fcb890046b3176a1ee5a7f4a98c884e2b4f51d8f56af9483d9a81d19aef095acae280189464bb61c0074976a2b1a67d916a964dc80258074523a7471e5cd33afd8a34b37fbdec175cf92fac0227549bb3594e6e0f761f4678e10a3de1ec07143d884e5f75a58a041fcc100c340c408e271e763694877391e52564aead61b50424f6d0a5f0dda237e9c85bcae4d11257ec31049bc7ba8c71be04d080851f94a5867b2811bc59bb715c8c108aec7db0015b582ecfe6de10635de9fea5fff343069eb1af5066d46d9fe502054399898f5025a20fc08625bcfcadddbfe2e5b1dd7ee8fd1f867c577412252cb6d10ae71c5b5ee863dc0a5ee84a7dd1925ffe11370572737ff96627e0e58fe197c35db5586ab50b3bad18df6857b30508118abf1a3eb77baa22660976ca6d63498ee9a39785b19c289e5e66ce0708a9f48b1a42055e1f35fcc13864ec264d8137c6a6e86dc7f40ae0478108257b4fbf325ec9f8a95d0fefd584d7606285c210961583732dcd0a97ebccabad7ce84073d18b208088b54fc46bc133c73ae744042daf6e9b836f5b54deb6b07bb4ef515292be2b80366949615a153eeeac3f3fd6f174a2770657911c4497f0d4dfe6505a6d66d72de9f8869bc803e8399bb5d9c33a979859bc2a4c3dcd1b7e346ce5e281ef6ea1212cba45cbe972c641061b59d2950f4f639309ea6554e6a30328eafb93cc4f4578828116009a21e0e9d204a5ae09f1d7049522356b159c93ef8f48ffc9368a46a115d01e095bddada776d1dec5b527cbbacbd934e12a5ded8af5bb1690a09a3cd93d47649076b7a87b70c299b50de90f990c9cdbcc92906aac180d7fbe4c012469bc7d937d1b26fa98624460e7b3dbdb4246d49c61b8daefc0b8901043e231048cddf8bf9aa08031571f4cef99ea743cc70e2a1fd61223c39bce800afb5b4bfc41d680e980184e64ac8311d880fe94d5802bf9c297cf699b4e2515204a04d360b99b43dfdf6bba3d7ae8efb26066916317bc11070cd26c9b5bdb70eb3e61d8094d6de1212ce3cdf9107c46be3e4cd43fb38908eb4a57a12d42b2b4203a632a2ed4191975027711306e8475671c1eb8ccf589dde944d0810ff14d2ffe945409f51a1b33d3d4bb7c60f18f745b051cd013d6013b721dd9d2036a9414bf8eb8aad99929a4c64477a6b5619d1ae7dd61bb7159348c2fd86c811690c5fea43c150bfa36ae7f004bc5f8b85b91a7ff1781a9b67cc47178cf2a340662f0255979093e9af580fe5036941ee4569b260369d2cbd4ac129f84e8390ee70f6e17e6d41504c632251d601ca74a98bfb20c0142c1f2346a19da8bc9d799569a17c2c11adfc89d8edd3bd9a81ca6c9fdc3f725b66f98568e86a5dbcbac1767ba53395383eb9721fbdd0bd572ce1623d6332f8508edd0739cacb9360fd39439be0fcda940fc6864762cd26a356f868fd971e29b11af1591252baa25c99a67f60044d4dfd472f5e6b6fe1079b148b8ba9ba716e3293bfc53a1445761a0f039b0dde762064a63be01308046f76b8090130975fdf7549e080e7ca3040a2b2b2ab9de4c98aeb42ca73403da4a9cba0a4d6ae8956bacae2dec009f68d3ea15d859e8479481613591c85adc5cd28ad4acc7db7d44cefb0e90c4e956deb5ef7a948199da11a1b6a3f40fa511e387200bafe17a67c1f7dcf4cd14add2cef0d9f2bd01f6b0bd31ba5d43f66be0e7ad47a6f0d231c8ee88ba74f6bb0ae453699d8272fc77829de44b07e76425347746407c5bdd7e76f732c34e08185e3015ece1f7a691a1e2564e2ad054da225a1d96494e5e4840cccfe84e97e5d1f8807fff6a399efac4b4eea22caff50fcf3c790b799183d7e2eefff7453675e60d92c7f51d5c1dd414960c825555014539b1826584557ee95a2d24a5a0532ea3719a497b815f0cbde2d5cd96285a7ebcdc17862816814c6b893e43b3a4cd6cf9acbdd1b38f6d4b0a4ea808940ff0a822f62bc33cb8a592495b67cbff967e15a5ae5c07def054a6b0327f92045db3b97a6e130b94fa572149e336f5098f186f7558e99e035f9c8cb67240667633e1f0c75b4c41df4c9ffb656d8858ac494c070a732062607c71daf73521fe47f1b3b381b09bd2b3a021a1675302a8914e1dd3cc0037c40c2e797b42ecdc8eee16e842ce5a834d760989323f4163fe5780ecd289443c24a96010e7a4e2588f90f32e607350c5bc599776e068f898bc04588c484b9e55e244d725b8eb823618537b20cda7d1daaead67eb6231aa47b5819b333574d1e66ac87557f9a89759facde69cbb8329ae7cb3b0e0d59c8754b868b7d7601fe207c1bbe1a0e9326bce13239827b353a09ace5b74d8260595f5befbbd3bfd0bc44a8334eda8df531742d9c23a0a3c16d63e930f3a70f4c9b9a86d8958ebbbb7f7012715c02581db183fdf93cdabcfa37933343acd59e9e7af17bc032461ce0156b4102bf524f9d3bd0219b9e1db1451d6c002ed351939b67479f0e95692889ce88f41c22e44b34b317", 0x1000, 0x4}, {&(0x7f00000024c0)="df3bee407ce5af5aaaed45be2e3fcf09129741778c69b28effe95b8b4d4e33e6a2bd96c4060e3197dc0e14a15f9d97b57b43f59ec1a7367fb867cf71c3ff06d8015ac22c1230327528978eb9183492bd7f7c780951e7d14240095e051e01d57ceef8ca416c3903a7567423965dc6eb413a9add6ed5fdbaa5175f6e518bce73f4c5b133b5d7578cc116bb5585a0", 0x8d, 0x80}], 0x884000, &(0x7f0000002640)={[{'\x00'}, {'\x00'}, {'.%/'}, {'\x00'}], [{@appraise}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '^['}}, {@audit}]}) syz_io_uring_submit(r1, r4, &(0x7f00000026c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x9000000a}, r6, 0x3, 0x0, 0x1}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:49:16 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) 16:49:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x40000, 0x50, 0x2}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8) 16:49:16 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:49:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) [ 2226.033950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2226.038322] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2226.040046] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2226.041652] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2226.043251] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2226.044867] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2226.045591] audit: type=1107 audit(1774543756.400:583): pid=17394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2226.046466] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2226.061202] audit: type=1107 audit(1774543756.410:584): pid=17403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:16 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2226.078324] loop6: detected capacity change from 0 to 135266304 16:49:16 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x48}, 0x0) 16:49:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7}, 0x0) 16:49:16 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 3) 16:49:16 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2226.140807] audit: type=1107 audit(1774543756.497:585): pid=17415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2226.150386] audit: type=1107 audit(1774543756.506:586): pid=17417 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) [ 2226.176515] FAULT_INJECTION: forcing a failure. [ 2226.176515] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.177898] CPU: 0 PID: 17426 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2226.178720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2226.179680] Call Trace: [ 2226.179995] dump_stack+0x107/0x167 [ 2226.180433] should_fail.cold+0x5/0xa [ 2226.180890] ? create_object.isra.0+0x3a/0xa30 [ 2226.181435] should_failslab+0x5/0x20 [ 2226.181893] kmem_cache_alloc+0x5b/0x310 [ 2226.182381] create_object.isra.0+0x3a/0xa30 [ 2226.182902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2226.183491] kmem_cache_alloc_trace+0x151/0x320 [ 2226.184055] io_uring_setup+0x258/0x2980 [ 2226.184539] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2226.185112] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2226.185713] ? wait_for_completion_io+0x270/0x270 [ 2226.186277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2226.186898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2226.187519] do_syscall_64+0x33/0x40 [ 2226.187972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2226.188581] RIP: 0033:0x7f7213914b19 [ 2226.189011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2226.191195] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2226.192108] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2226.192916] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2226.193760] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2226.194575] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2226.195425] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2226.199822] Module has invalid ELF structures 16:49:16 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c}, 0x0) 16:49:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x8}, 0x0) 16:49:16 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x40010, r0, 0x8000000) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0xb0000017}, r6}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2226.230237] audit: type=1107 audit(1774543756.586:587): pid=17432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:16 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2226.278362] audit: type=1107 audit(1774543756.634:588): pid=17439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 16:49:33 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x68}, 0x0) 16:49:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa}, 0x0) 16:49:33 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:49:33 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 4) 16:49:33 executing program 4: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000e46000/0xc000)=nil, &(0x7f0000bc6000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x603, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xd, 0x12, r5, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40041) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x48040) close_range(r7, r0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r1, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x3, 0xaf4d, 0x0, 0x1}}, 0x0, 0x0, 0x1}, 0x5) 16:49:33 executing program 6: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, {0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x200, [0x7, 0x5, 0x7, 0x101, 0x40, 0x6, 0x8]}, 0x5c) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:49:33 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2242.771079] audit: type=1107 audit(1774543773.127:589): pid=17453 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2242.782571] FAULT_INJECTION: forcing a failure. [ 2242.782571] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2242.785143] CPU: 1 PID: 17462 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2242.786578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.788297] Call Trace: [ 2242.788844] dump_stack+0x107/0x167 [ 2242.789628] should_fail.cold+0x5/0xa [ 2242.790439] __alloc_pages_nodemask+0x182/0x600 [ 2242.791414] ? lock_release+0x680/0x680 [ 2242.792259] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2242.793515] ? lock_downgrade+0x6d0/0x6d0 [ 2242.794396] alloc_pages_current+0x187/0x280 [ 2242.795326] kmalloc_order+0x35/0x160 [ 2242.796141] kmalloc_order_trace+0x14/0xa0 [ 2242.797041] io_uring_setup+0x33c/0x2980 [ 2242.797891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2242.798825] audit: type=1107 audit(1774543773.152:590): pid=17452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2242.798903] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2242.798920] ? wait_for_completion_io+0x270/0x270 [ 2242.798965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2242.805035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2242.806113] do_syscall_64+0x33/0x40 [ 2242.806895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2242.807988] RIP: 0033:0x7f7213914b19 [ 2242.808760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.812605] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2242.814202] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2242.815720] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2242.817210] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2242.818706] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2242.820208] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2242.847980] Module has invalid ELF structures 16:49:33 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c}, 0x0) 16:49:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf}, 0x0) 16:49:33 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) 16:49:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 16:49:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, r1, 0x0) 16:49:33 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:49:33 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2242.972905] audit: type=1107 audit(1774543773.328:591): pid=17475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2242.991319] audit: type=1107 audit(1774543773.347:592): pid=17474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:33 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 5) [ 2243.042152] Module has invalid ELF structures 16:49:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x48}, 0x0) [ 2243.069818] Module has invalid ELF structures 16:49:33 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x74}, 0x0) [ 2243.094343] FAULT_INJECTION: forcing a failure. [ 2243.094343] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.096755] CPU: 0 PID: 17493 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2243.098201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.099966] Call Trace: [ 2243.100638] dump_stack+0x107/0x167 [ 2243.101413] should_fail.cold+0x5/0xa [ 2243.102221] ? create_object.isra.0+0x3a/0xa30 [ 2243.103190] should_failslab+0x5/0x20 [ 2243.104052] kmem_cache_alloc+0x5b/0x310 [ 2243.105119] create_object.isra.0+0x3a/0xa30 [ 2243.106058] ? kasan_unpoison_shadow+0x33/0x50 [ 2243.107231] kmalloc_order+0xfe/0x160 [ 2243.108126] kmalloc_order_trace+0x14/0xa0 [ 2243.109036] io_uring_setup+0x33c/0x2980 [ 2243.110086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2243.111119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2243.112447] ? wait_for_completion_io+0x270/0x270 [ 2243.113595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.114987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.116107] do_syscall_64+0x33/0x40 [ 2243.117067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2243.118156] RIP: 0033:0x7f7213914b19 [ 2243.119120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.123025] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2243.124637] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2243.126139] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2243.127650] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2243.129151] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2243.130664] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2243.132628] audit: type=1107 audit(1774543773.475:593): pid=17494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2243.174407] audit: type=1107 audit(1774543773.530:594): pid=17497 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2256.279296] audit: type=1107 audit(1774543786.635:595): pid=17504 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:46 executing program 4: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:49:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 6) 16:49:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a}, 0x0) 16:49:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f00aff807d36f"], 0x20}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xe7}]}, 0x44}}, 0x40850) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r4, 0x472e, 0x7fea, 0x1, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) [ 2256.296655] FAULT_INJECTION: forcing a failure. [ 2256.296655] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.299611] CPU: 1 PID: 17512 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2256.301376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.303472] Call Trace: [ 2256.304158] dump_stack+0x107/0x167 [ 2256.305093] should_fail.cold+0x5/0xa [ 2256.306062] ? io_uring_setup+0x40b/0x2980 [ 2256.307381] should_failslab+0x5/0x20 [ 2256.308362] kmem_cache_alloc_trace+0x55/0x320 [ 2256.309524] io_uring_setup+0x40b/0x2980 [ 2256.310556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2256.311789] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2256.313079] ? wait_for_completion_io+0x270/0x270 [ 2256.314326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.315650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.316977] do_syscall_64+0x33/0x40 [ 2256.317922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2256.319220] RIP: 0033:0x7f7213914b19 [ 2256.320173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.324134] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2256.325733] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2256.327232] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2256.328740] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2256.330245] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2256.331759] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2256.349926] audit: type=1326 audit(1774543786.706:596): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17509 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f032fff4b19 code=0x0 16:49:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 16:49:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:49:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c}, 0x0) [ 2256.365998] audit: type=1107 audit(1774543786.722:597): pid=17516 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2256.368396] Module has invalid ELF structures 16:49:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0}, 0x0) 16:49:46 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r5, 0x10000000) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) sendfile(r8, r5, &(0x7f00000000c0)=0x3, 0xb920000) syz_io_uring_submit(0x0, r7, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r6}}, 0x1) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4710) 16:49:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2256.422033] audit: type=1107 audit(1774543786.778:598): pid=17523 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:49:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x68}, 0x0) 16:49:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 16:49:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 7) 16:49:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2256.467005] Module has invalid ELF structures [ 2256.469426] audit: type=1107 audit(1774543786.825:599): pid=17537 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2256.472941] Module has invalid ELF structures [ 2256.477425] FAULT_INJECTION: forcing a failure. [ 2256.477425] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.479865] CPU: 1 PID: 17539 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2256.481328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.483073] Call Trace: [ 2256.483633] dump_stack+0x107/0x167 [ 2256.484420] should_fail.cold+0x5/0xa [ 2256.485228] ? create_object.isra.0+0x3a/0xa30 [ 2256.486183] should_failslab+0x5/0x20 [ 2256.486994] kmem_cache_alloc+0x5b/0x310 [ 2256.487867] create_object.isra.0+0x3a/0xa30 [ 2256.488837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.489917] kmem_cache_alloc_trace+0x151/0x320 [ 2256.490906] io_uring_setup+0x40b/0x2980 [ 2256.491771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2256.492791] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2256.493856] ? wait_for_completion_io+0x270/0x270 [ 2256.494907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.496020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.497112] do_syscall_64+0x33/0x40 [ 2256.497902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2256.498990] RIP: 0033:0x7f7213914b19 [ 2256.499785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.503683] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2256.505289] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2256.506801] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2256.508311] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2256.509827] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2256.511331] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2257.128931] audit: type=1326 audit(1774543787.485:600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17509 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f032fff4b19 code=0x0 16:50:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x78eb, &(0x7f0000000000)={0x0, 0xef04, 0x10, 0x3, 0x321, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x5841, &(0x7f0000000180)={0x0, 0x2122, 0x2, 0x0, 0x397}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000240)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r3}}, 0x51) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:50:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:03 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 8) 16:50:03 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x128}, 0x0) 16:50:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c}, 0x0) 16:50:03 executing program 6: r0 = syz_io_uring_setup(0x6708, &(0x7f0000000180)={0x0, 0x5589}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71b3, &(0x7f0000000000)={0x0, 0xf6c6, 0x10, 0x3, 0x187, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65, 0x1}, 0xfff) [ 2273.092316] audit: type=1107 audit(1774543803.448:601): pid=17550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2273.094604] FAULT_INJECTION: forcing a failure. [ 2273.094604] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.096424] CPU: 0 PID: 17555 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2273.097514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.098798] Call Trace: [ 2273.099227] dump_stack+0x107/0x167 [ 2273.099810] should_fail.cold+0x5/0xa [ 2273.100431] ? create_object.isra.0+0x3a/0xa30 [ 2273.101146] should_failslab+0x5/0x20 [ 2273.101736] kmem_cache_alloc+0x5b/0x310 [ 2273.102379] create_object.isra.0+0x3a/0xa30 [ 2273.103094] kmemleak_alloc_percpu+0xa0/0x100 [ 2273.103809] pcpu_alloc+0x4e2/0x1240 [ 2273.104409] ? io_tctx_exit_cb+0xf0/0xf0 [ 2273.105059] percpu_ref_init+0x31/0x3d0 [ 2273.105685] io_uring_setup+0x47a/0x2980 [ 2273.106303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2273.107061] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2273.107829] ? wait_for_completion_io+0x270/0x270 [ 2273.108591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.109395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.110211] do_syscall_64+0x33/0x40 [ 2273.110781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2273.111603] RIP: 0033:0x7f7213914b19 [ 2273.112183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.115055] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2273.116238] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2273.117339] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2273.118457] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2273.119620] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2273.119838] Module has invalid ELF structures [ 2273.120777] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2273.120948] audit: type=1107 audit(1774543803.468:602): pid=17547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 16:50:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2273.145805] Module has invalid ELF structures 16:50:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x74}, 0x0) [ 2273.205230] audit: type=1107 audit(1774543803.561:603): pid=17569 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 16:50:03 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x300}, 0x0) 16:50:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a}, 0x0) 16:50:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2273.267294] audit: type=1107 audit(1774543803.623:604): pid=17571 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:03 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r6, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r7}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0x3, 0x2, &(0x7f0000000000)="ac5bc09a88c3d1bc48098d4eebfde3ea14b45e2ab8eaac43bce7a0e46c862ad8d1b92a8d7cce36d33eed021c7ff237fd9e18a817f85553046450cf3526c3e6062019fb82ce7cd764f156be5efa45e385027a8c5512591cd56dd1fbdc2dbcd36141db8807c46d57a0f42934fb7c99bb323e82428c15e9057fca129657259d776b0d47bd06ebfb956d3865588015d9b8789ef7a98c", 0x94, 0x8, 0x1, {0x0, r7}}, 0xffffffff) 16:50:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x150f, &(0x7f0000000000)={0x0, 0x5bca, 0x31d088cdfaad81e3, 0x0, 0xcd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0xa19c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:50:03 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 9) [ 2273.316796] Module has invalid ELF structures [ 2273.321802] audit: type=1107 audit(1774543803.678:605): pid=17578 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2273.351160] FAULT_INJECTION: forcing a failure. [ 2273.351160] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.352871] CPU: 0 PID: 17589 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2273.353830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.354984] Call Trace: [ 2273.355351] dump_stack+0x107/0x167 [ 2273.355864] should_fail.cold+0x5/0xa [ 2273.356402] ? create_object.isra.0+0x3a/0xa30 [ 2273.357029] should_failslab+0x5/0x20 [ 2273.357555] kmem_cache_alloc+0x5b/0x310 [ 2273.358123] create_object.isra.0+0x3a/0xa30 [ 2273.358729] kmemleak_alloc_percpu+0xa0/0x100 [ 2273.359347] pcpu_alloc+0x4e2/0x1240 [ 2273.359874] ? io_tctx_exit_cb+0xf0/0xf0 [ 2273.360428] percpu_ref_init+0x31/0x3d0 [ 2273.360974] io_uring_setup+0x47a/0x2980 [ 2273.361528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2273.362199] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2273.362893] ? wait_for_completion_io+0x270/0x270 [ 2273.363566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.364308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.365030] do_syscall_64+0x33/0x40 [ 2273.365540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2273.366263] RIP: 0033:0x7f7213914b19 [ 2273.366774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.369310] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2273.370344] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2273.371312] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2273.372295] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2273.373260] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2273.374228] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:50:03 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x500}, 0x0) [ 2273.434187] audit: type=1107 audit(1774543803.790:606): pid=17592 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 16:50:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9f}, 0x0) 16:50:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) getdents64(r0, &(0x7f0000000340)=""/251, 0xfb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000f00c0ff0300241f03b3a2da44f12075b0bc79768efd5fa351a95104d3df0d60a2254e6835563a542fbde19eb8cb7ee50e08d575076aaef27189419f297de96d3488043d1cf7453f3de4dbe871c0134e3b2aaf11e471a4cfbb020000004370742b27521f306c9919cdd58308b25b745a3551778a8e194921d9cd005500c738db627e035aa7813b187d299251fef063a942f5a54d77718bba9e3d7e41ca65c7d7345dfb35c0815a75867c90286b319cba850e86ca864f218db484a6db7c8441e8ebff2bd4905428054e1044a1644032f8a2a9bea757073b1f691a52e0f2827a91ae0eb9c1e35940e2d88b5a619a5f611ce5519a33c49290b522ecf7850b5493a868874a396d0d38c4ece27997708639028a23089af87eee118e13c3935b1e9a072bc3dfd5fd2a8ba8bcf2a2b085b86032bc30b993d41e576681bdaa9b65327a11614a678b33f600000060455eb2f34870d4d00e26eeb6125b1fc0fb9fa6bd0668734c88dc4179e3c07ebc42d6419d6aa073a486efbe3a920b54590612cb1d570106a41ea90ac43d322b4fd2bf15e85ba68abe8e17509bea9c2fff2fd904884cb283eea67876703e41a61b892942f704416841e46365292a935f8d7a6ac822365d7dbb1b16d2510227ee7ba9b037991e697cf6eab55fdee7e9b42056a5a80a1a28aa6a5198ff420cf0b335a3cb311e050033302d6a960d31ef77f9511e3568d65056ffb064f2a099991b24b650a7fe2bb6cd62d13049907700000014006000"/562], 0x1394}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r3 = dup2(0xffffffffffffffff, r1) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x2000, 0xa8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="04000000fb0000002e2f66696c653000"]) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r5, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r6, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000180)={0x400, 0xfffffff8, 0x1, 0x80000000, 0x68}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 16:50:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:50:17 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 10) 16:50:17 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x600}, 0x0) [ 2286.928563] audit: type=1107 audit(1774543817.283:607): pid=17702 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2286.931345] FAULT_INJECTION: forcing a failure. [ 2286.931345] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.934328] CPU: 1 PID: 17709 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2286.936088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.938198] Call Trace: [ 2286.938872] dump_stack+0x107/0x167 [ 2286.939805] should_fail.cold+0x5/0xa [ 2286.940791] ? percpu_ref_init+0xd8/0x3d0 [ 2286.941861] should_failslab+0x5/0x20 [ 2286.942839] kmem_cache_alloc_trace+0x55/0x320 [ 2286.944025] ? io_tctx_exit_cb+0xf0/0xf0 [ 2286.945058] percpu_ref_init+0xd8/0x3d0 [ 2286.946080] io_uring_setup+0x47a/0x2980 [ 2286.947131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2286.948384] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2286.949667] ? wait_for_completion_io+0x270/0x270 [ 2286.950951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.952296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.953595] do_syscall_64+0x33/0x40 [ 2286.954545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2286.955853] RIP: 0033:0x7f7213914b19 [ 2286.956824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.961530] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2286.963482] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2286.965133] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2286.966645] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2286.968156] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2286.969672] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:50:17 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:17 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0xb21) [ 2286.989172] audit: type=1107 audit(1774543817.345:608): pid=17701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2287.002189] Module has invalid ELF structures 16:50:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x128, 0x5a27, 0x1, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/if_inet6\x00') 16:50:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0}, 0x0) 16:50:17 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x700}, 0x0) [ 2287.069934] audit: type=1107 audit(1774543817.426:609): pid=17777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:17 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) [ 2287.118430] audit: type=1107 audit(1774543817.474:610): pid=17827 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2287.150886] Module has invalid ELF structures 16:50:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x300}, 0x0) 16:50:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x100000, 0x0, 0x0, 0x0) [ 2301.379130] FAULT_INJECTION: forcing a failure. [ 2301.379130] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.380826] CPU: 0 PID: 17847 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2301.381843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.383043] Call Trace: [ 2301.383433] dump_stack+0x107/0x167 [ 2301.383965] should_fail.cold+0x5/0xa [ 2301.384529] ? create_object.isra.0+0x3a/0xa30 [ 2301.385201] should_failslab+0x5/0x20 [ 2301.385758] kmem_cache_alloc+0x5b/0x310 [ 2301.386354] create_object.isra.0+0x3a/0xa30 [ 2301.386992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2301.387732] kmem_cache_alloc_trace+0x151/0x320 [ 2301.388420] ? io_tctx_exit_cb+0xf0/0xf0 [ 2301.388995] percpu_ref_init+0xd8/0x3d0 [ 2301.389579] io_uring_setup+0x47a/0x2980 [ 2301.390172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2301.390886] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.391624] ? wait_for_completion_io+0x270/0x270 [ 2301.392352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.393116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.393863] do_syscall_64+0x33/0x40 [ 2301.394398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.395137] RIP: 0033:0x7f7213914b19 [ 2301.395677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.398334] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.399434] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2301.400469] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2301.401503] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2301.402530] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2301.403569] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2301.414616] audit: type=1107 audit(1774543831.758:611): pid=17849 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2301.416354] audit: type=1107 audit(1774543831.764:612): pid=17850 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:31 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 11) 16:50:31 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0x1001c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10000, 0x32d}, &(0x7f0000a26000/0x1000)=nil, &(0x7f000026a000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000480)) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10, 0x1010, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x2}, 0x800) r8 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r8, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x431, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r11, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r11, 0x0) execveat(r11, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f00000004c0)='\b\x8b\xed\xab\xcc/\xea6\x89\vZ#~\xde,\xec\xd2\x01q\x1b\x80\xa5\xdav\xdeS\x91\xa1@\xa7\x0104\xf463\x1cL\xb4\x83@\xa8s\x0fpl\tb\xbe\xab\xf6\xb8\xf8\x96D\xe7j\x99.\xe9\xc6\x82\x12)\xbd\xf2C\xd2\xf4,\xd4\xc5\x8d\x95\x83\x89\a\b\x81\xfb.J\xb9\xd8\x1b\x11ij\b\xf5\xb7\xf3\x0e\xfd\x94\x82\x84\x7f\xaf\xe7rX\x9f\xf3\t4{\x13\x98\xaa\xfd\xd8H\x06%\x83\xc9\xfc\x15\xfbS\xed=\bF\xe3\xcaL\xe9\xeb\t\x84y\x91\xe0#4y\x81\xb51\xa6\xad\"\xc9I\x13\xdb\xc5b\x19{?w%\xc7%e\xbe^\xe35]*c\xb9\xcd`\xd5\xfe*\xdd\x13\vU\xdb\'\\\xaa\xbb\t}`\xc6\b\n\xedW\xf1\x9c\xe3.\xe4\xa5\x9d>\xbb\x9e\xca\xf7\x97]Gi\x99+\xcek!\xce\xcc\xf4;\x8f}\xb9/\x11\xc5J\xe5=\x82\xd7\x89S\xd7\xd9\xe7\x0eu\xd2\xb4h\x82\xedw&6>\x89l\xc6&\xf6C\xffk\xa1q\x9c\x15m\xc6\nD\xc4\xc1\xa2\x16\x9ae|\xde\x9c\x17F\x14\xc9\xc8\aq\xb0y\xec\xb0&\xa6\x93', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00'], &(0x7f00000005c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r2, 0x101, 0x0, 0x56e, 0x0, 0x0, {0x0, r9}}, 0x4) 16:50:31 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x3, &(0x7f0000000000)="d6195ce6ee80d7e13572b35e4903c7446e17ab70bce5fafd28e10cadfa741e545851126f7650a3a5713ea46be6ef4733d4c7dd612ed7e7a96fe119dea078eb758676eb276cdacfe17c0b8789c0896c949fc7f59da9cbc9e4d0bda12edba0939cdf68666b2a220a4a0e4bced02ec6ca466ba85408c1d67090a26991d84110af00432bc30a24a147d999e69eaa21d26dfa03e2049eb98e66463047bde27989549bff328b098df6dec87f3a20f9b761ac9f3eb4e347cd3d", 0x8000, 0x0, 0x0, {0x2, r3}}, 0x2) r4 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = inotify_init1(0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x3f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x50, r0, 0x0) 16:50:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa00}, 0x0) 16:50:31 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2301.448020] Module has invalid ELF structures 16:50:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf00}, 0x0) 16:50:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x500}, 0x0) [ 2301.524269] audit: type=1107 audit(1774543831.880:613): pid=17865 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r5, 0x0) io_uring_enter(r5, 0x6c3e, 0x3b0c, 0x3, &(0x7f00000000c0)={[0xb3]}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x7) syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/49, 0x31}], 0x1, &(0x7f0000000480)=""/133, 0x85}, 0x0, 0x1, 0x1}, 0x111e) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r9, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r9, 0x80, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0xa02) 16:50:31 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 12) 16:50:31 executing program 6: r0 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_io_uring_setup(0x279b, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffff, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="cdfe908d9ce8e719475d3abb66b01a4485f5943d312105aa0794a4a5e2a9bd21e498ed51cf8c8c89c1b198bccaec667a9248fb4f612877d53c1c18896812a762272723c5929ed999d17c68d46379b56f97ad4beac353666021f1d2fe3e4e97c5ceca46f41cd776870df22d41299fc2e42dd05a7184107dd0ed3b97ad2c4d6f61a59099ad6bb3ffd5e499774e017b3cbaa13c28b3b045dc14a13d73601f492eac1af1912a", 0xa4, 0x9}], 0x2000ce0, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@euid_lt={'euid<', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x006\x00', @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="f7e61361c8e3d404"], 0x398}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000980)={{0x3, 0x7ff}, 0x100, './file1\x00'}) [ 2301.558916] audit: type=1107 audit(1774543831.915:614): pid=17877 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:31 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 16:50:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x2801}, 0x0) [ 2301.607840] FAULT_INJECTION: forcing a failure. [ 2301.607840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2301.609510] CPU: 0 PID: 17920 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2301.610416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.611492] Call Trace: [ 2301.611840] dump_stack+0x107/0x167 [ 2301.612317] should_fail.cold+0x5/0xa [ 2301.612809] __alloc_pages_nodemask+0x182/0x600 [ 2301.613411] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2301.614230] ? cap_capable+0x1cd/0x230 [ 2301.614753] alloc_pages_current+0x187/0x280 [ 2301.615333] __get_free_pages+0xc/0xa0 [ 2301.615829] io_uring_setup+0xe27/0x2980 [ 2301.616364] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.617017] ? wait_for_completion_io+0x270/0x270 [ 2301.617650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.618330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.618992] do_syscall_64+0x33/0x40 [ 2301.619476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.620133] RIP: 0033:0x7f7213914b19 [ 2301.620622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.622982] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.623977] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2301.624952] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2301.625891] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2301.626840] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2301.627769] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:50:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x600}, 0x0) [ 2301.657320] Module has invalid ELF structures [ 2301.689135] audit: type=1107 audit(1774543832.045:615): pid=17944 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2301.713743] audit: type=1107 audit(1774543832.070:616): pid=17954 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2315.969457] FAULT_INJECTION: forcing a failure. [ 2315.969457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2315.972667] CPU: 1 PID: 18000 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2315.974418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.976524] Call Trace: [ 2315.977203] dump_stack+0x107/0x167 [ 2315.978137] should_fail.cold+0x5/0xa [ 2315.979115] __alloc_pages_nodemask+0x182/0x600 [ 2315.980304] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2315.981857] ? cap_capable+0x1cd/0x230 [ 2315.982858] alloc_pages_current+0x187/0x280 [ 2315.983975] __get_free_pages+0xc/0xa0 [ 2315.984981] io_uring_setup+0xf9a/0x2980 [ 2315.986028] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2315.987310] ? wait_for_completion_io+0x270/0x270 [ 2315.988570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.989906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.991231] do_syscall_64+0x33/0x40 [ 2315.992188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.993495] RIP: 0033:0x7f7213914b19 [ 2315.994435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.999083] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2316.001005] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2316.002807] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2316.004627] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2316.006419] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2316.008226] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:50:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:46 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x800, 0x1f, 0x93, 0x23d1, 0x2}}) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) 16:50:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x700}, 0x0) 16:50:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r8, 0x0) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r9, 0x10000000) syz_io_uring_submit(0x0, r11, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r10}}, 0x1) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5279, &(0x7f0000000040)=[r7, r8], 0x2, 0x0, 0x1, {0x0, r10}}, 0xee) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:50:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 13) 16:50:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0xe0ff7f, 0x0, 0x0, 0x0) 16:50:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4800}, 0x0) 16:50:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2316.040956] Module has invalid ELF structures [ 2316.045397] audit: type=1107 audit(1774543846.401:617): pid=17999 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2316.055153] audit: type=1107 audit(1774543846.411:618): pid=18009 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2316.068225] Module has invalid ELF structures 16:50:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) 16:50:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa00}, 0x0) 16:50:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 14) 16:50:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c00}, 0x0) 16:50:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) [ 2316.165847] FAULT_INJECTION: forcing a failure. [ 2316.165847] name failslab, interval 1, probability 0, space 0, times 0 16:50:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2316.167399] CPU: 0 PID: 18023 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2316.168354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.169375] Call Trace: [ 2316.169714] dump_stack+0x107/0x167 [ 2316.170165] should_fail.cold+0x5/0xa [ 2316.170648] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2316.171336] should_failslab+0x5/0x20 [ 2316.171811] kmem_cache_alloc_trace+0x55/0x320 [ 2316.172389] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2316.173063] io_uring_setup+0x14f6/0x2980 [ 2316.173587] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2316.174206] ? wait_for_completion_io+0x270/0x270 [ 2316.174811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.175452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.176091] do_syscall_64+0x33/0x40 [ 2316.176564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.177193] RIP: 0033:0x7f7213914b19 [ 2316.177659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.179923] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2316.180879] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2316.181757] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2316.182638] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2316.183520] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2316.184404] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2316.189578] audit: type=1107 audit(1774543846.534:619): pid=18017 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x80000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2316.199427] Module has invalid ELF structures [ 2316.200994] audit: type=1107 audit(1774543846.557:620): pid=18026 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2316.251283] Module has invalid ELF structures 16:50:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf00}, 0x0) 16:50:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x2812, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) io_uring_enter(r2, 0x5d69, 0xb25b, 0x0, &(0x7f0000000040)={[0x1]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) mmap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r2, 0x6c8cb000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r3, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x64}, 0x7) 16:50:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6800}, 0x0) [ 2316.292680] Module has invalid ELF structures 16:50:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x2f9a, &(0x7f0000000000)={0x0, 0x7a2a, 0x2, 0x0, 0x14}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2316.303087] audit: type=1107 audit(1774543846.659:621): pid=18043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2316.337056] audit: type=1107 audit(1774543846.693:622): pid=18046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:50:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:50:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0) [ 2316.398647] Module has invalid ELF structures [ 2316.426308] Module has invalid ELF structures 16:51:01 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 15) 16:51:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 16:51:01 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:01 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c00}, 0x0) 16:51:01 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4800}, 0x0) 16:51:01 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000881000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x2b0e, 0x4aca, 0x1, &(0x7f00000005c0)={[0x1]}, 0x8) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x24f2, &(0x7f0000000040)={0x0, 0xe8e6, 0xe, 0x0, 0x1e0, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)="6be1f7599d288142e009f04b86333fc9500d9970c2acd0b2bdff47896dbbfaa5016b2197d65b7d26294f6d7d95dc530c7676fe866954ab9d3bb96daea710610872", 0x41}, {&(0x7f0000000400)="b91e3d5158a9a63fdb0a2c4188dde7235f83b06aa19b9beab36bbde62071e0fb0e674dc9186055b5a7213446cd32b94e5476db3b2ffd39c97b41ee9a9f794e33116bb9b99096de80140795ebde6815e16e0ccbe35ea18311ee785d2ea7c73a5ecd26710d1a432e40de4ad7adee2db4ed515839e68fa13ccbbce6d87cf24eead9a0df23d75dd0d8bb0763db81a5a17d6afe5ab538500bbd5183e20f1a3da3aa6ee12e77b023e1c3f269346cc616f646df4ce0a554fb48e9", 0xb7}], 0x2, 0x8000, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = accept(r2, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x4) write(r2, &(0x7f0000000500)="79a4e429e9cb5d3454e8bfa0809102177bef4b88cc3fa7176f36193064f9d29b0dd2137357de0ad67c6fc469a6819329664e142b9992b2b589c29abe997985be1307e2d2d13a14c1bdf386515f0fb069", 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:51:01 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000540)={0x0, 0x10000000, 0x0, 0x8000805}, &(0x7f00000a0000)=nil, &(0x7f0000ea3000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x80, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x4) syz_io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0x78ff, 0x4, 0x0, 0x352}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000fb6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x480000, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000400), 0x204000, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@fscache}, {@nodevmap}, {@version_u}, {@cache_none}, {@afid={'afid', 0x3d, 0x5}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_type={'obj_type', 0x3d, '/)'}}]}}) [ 2330.832772] Module has invalid ELF structures [ 2330.834237] 9pnet: Insufficient options for proto=fd [ 2330.842610] audit: type=1107 audit(1774543861.198:623): pid=18079 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2330.844324] FAULT_INJECTION: forcing a failure. [ 2330.844324] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.844350] CPU: 1 PID: 18085 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2330.847404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.849535] Call Trace: [ 2330.850106] dump_stack+0x107/0x167 [ 2330.850882] should_fail.cold+0x5/0xa [ 2330.851699] ? create_object.isra.0+0x3a/0xa30 [ 2330.852677] should_failslab+0x5/0x20 [ 2330.853501] kmem_cache_alloc+0x5b/0x310 [ 2330.854365] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2330.855635] create_object.isra.0+0x3a/0xa30 [ 2330.856566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.857645] kmem_cache_alloc_trace+0x151/0x320 [ 2330.858633] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2330.859778] io_uring_setup+0x14f6/0x2980 [ 2330.860672] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2330.861744] ? wait_for_completion_io+0x270/0x270 [ 2330.862788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.863896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.864999] do_syscall_64+0x33/0x40 [ 2330.865780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2330.866861] RIP: 0033:0x7f7213914b19 [ 2330.867640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.871485] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2330.873097] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2330.874597] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2330.876090] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2330.877599] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 16:51:01 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2330.879100] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2330.884433] audit: type=1107 audit(1774543861.240:624): pid=18080 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:01 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c00}, 0x0) 16:51:01 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 16) [ 2330.985785] Module has invalid ELF structures [ 2331.000430] audit: type=1107 audit(1774543861.356:625): pid=18095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2331.002199] FAULT_INJECTION: forcing a failure. [ 2331.002199] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.003663] CPU: 0 PID: 18097 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2331.004568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.005603] Call Trace: [ 2331.005948] dump_stack+0x107/0x167 [ 2331.006411] should_fail.cold+0x5/0xa [ 2331.006890] ? create_object.isra.0+0x3a/0xa30 [ 2331.007460] should_failslab+0x5/0x20 [ 2331.007943] kmem_cache_alloc+0x5b/0x310 [ 2331.008453] create_object.isra.0+0x3a/0xa30 [ 2331.008999] kmemleak_alloc_percpu+0xa0/0x100 [ 2331.009564] pcpu_alloc+0x4e2/0x1240 [ 2331.010047] ? io_async_queue_proc+0x80/0x80 [ 2331.010606] percpu_ref_init+0x31/0x3d0 [ 2331.011104] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2331.011754] io_uring_setup+0x14f6/0x2980 [ 2331.012280] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2331.012893] ? wait_for_completion_io+0x270/0x270 [ 2331.013510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.014167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.014817] do_syscall_64+0x33/0x40 [ 2331.015289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.015930] RIP: 0033:0x7f7213914b19 [ 2331.016376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.018678] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2331.019581] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2331.020465] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2331.021359] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2331.022241] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2331.023087] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:51:16 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 17) 16:51:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6800}, 0x0) 16:51:16 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f00005fc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x10010, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000e, 0x40010, r2, 0x0) [ 2345.801284] audit: type=1107 audit(1774543876.157:626): pid=18105 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:16 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7400}, 0x0) 16:51:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 16:51:16 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2345.829956] audit: type=1107 audit(1774543876.186:627): pid=18109 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:16 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x44) 16:51:16 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2345.861901] Module has invalid ELF structures [ 2345.864711] FAULT_INJECTION: forcing a failure. [ 2345.864711] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.867833] CPU: 0 PID: 18118 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2345.869739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.871993] Call Trace: [ 2345.872676] dump_stack+0x107/0x167 [ 2345.873647] should_fail.cold+0x5/0xa [ 2345.874718] ? create_object.isra.0+0x3a/0xa30 [ 2345.875900] should_failslab+0x5/0x20 [ 2345.876833] kmem_cache_alloc+0x5b/0x310 [ 2345.877806] create_object.isra.0+0x3a/0xa30 [ 2345.878887] kmemleak_alloc_percpu+0xa0/0x100 [ 2345.880119] pcpu_alloc+0x4e2/0x1240 [ 2345.881113] ? io_async_queue_proc+0x80/0x80 [ 2345.882261] percpu_ref_init+0x31/0x3d0 [ 2345.883307] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2345.884665] io_uring_setup+0x14f6/0x2980 [ 2345.885657] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2345.886836] ? wait_for_completion_io+0x270/0x270 [ 2345.887990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.889226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.890426] do_syscall_64+0x33/0x40 [ 2345.891291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2345.892482] RIP: 0033:0x7f7213914b19 16:51:16 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a00}, 0x0) [ 2345.893356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.897759] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2345.899544] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2345.901217] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2345.902889] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2345.904563] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2345.906242] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:51:16 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x101000}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r0}}, 0xe4) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x280, &(0x7f0000000180)={0x0, 0x7860, 0x20, 0x2, 0x2000026b, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:51:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c00}, 0x0) 16:51:16 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2346.000576] audit: type=1107 audit(1774543876.356:628): pid=18128 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2346.006636] audit: type=1107 audit(1774543876.362:629): pid=18129 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:16 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:16 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 18) 16:51:16 executing program 6: r0 = syz_io_uring_setup(0x6214, &(0x7f0000000000)={0x0, 0x100, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="24214e460651b961edc0b69a84975035538aa3e21dd096dd0a5c3f46cdc0bc40", 0x20, 0x101}, {&(0x7f00000001c0)="9c8f2bd44b5623c6d332082a985b92046b0519a71b8a998b7b58", 0x1a, 0x6}], 0x18000, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@dont_hash}, {@dont_measure}]}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x67, &(0x7f0000000280)=[0xffffffffffffffff, r3, r0], 0x3, 0x0, 0x0, {0x0, r4}}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) 16:51:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) [ 2346.125189] Module has invalid ELF structures [ 2346.129063] loop6: detected capacity change from 0 to 512 [ 2346.132848] FAULT_INJECTION: forcing a failure. [ 2346.132848] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.135298] CPU: 0 PID: 18142 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2346.136778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2346.138390] EXT4-fs (loop6): unable to read superblock [ 2346.138528] Call Trace: [ 2346.138555] dump_stack+0x107/0x167 [ 2346.138580] should_fail.cold+0x5/0xa [ 2346.141717] ? percpu_ref_init+0xd8/0x3d0 [ 2346.142575] should_failslab+0x5/0x20 [ 2346.143361] kmem_cache_alloc_trace+0x55/0x320 [ 2346.144298] ? io_async_queue_proc+0x80/0x80 [ 2346.145212] percpu_ref_init+0xd8/0x3d0 [ 2346.146052] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2346.147154] io_uring_setup+0x14f6/0x2980 [ 2346.148013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2346.149068] ? wait_for_completion_io+0x270/0x270 [ 2346.150087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2346.151157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2346.152218] do_syscall_64+0x33/0x40 [ 2346.152996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2346.154045] RIP: 0033:0x7f7213914b19 [ 2346.154803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2346.158549] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2346.160096] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2346.161550] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2346.162995] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2346.164444] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2346.165897] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2361.798544] audit: type=1107 audit(1774543892.150:630): pid=18162 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2361.806743] FAULT_INJECTION: forcing a failure. [ 2361.806743] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.809490] CPU: 1 PID: 18161 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2361.810960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.812871] Call Trace: 16:51:32 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 19) 16:51:32 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf000}, 0x0) 16:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:32 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7400}, 0x0) 16:51:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4049811, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:51:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x5) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16:51:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) [ 2361.813472] dump_stack+0x107/0x167 [ 2361.814374] should_fail.cold+0x5/0xa [ 2361.815192] ? create_object.isra.0+0x3a/0xa30 [ 2361.816152] should_failslab+0x5/0x20 [ 2361.817069] kmem_cache_alloc+0x5b/0x310 [ 2361.817944] create_object.isra.0+0x3a/0xa30 [ 2361.818874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2361.819969] kmem_cache_alloc_trace+0x151/0x320 [ 2361.820989] ? io_async_queue_proc+0x80/0x80 [ 2361.821629] Module has invalid ELF structures [ 2361.821921] percpu_ref_init+0xd8/0x3d0 [ 2361.823611] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2361.824771] io_uring_setup+0x14f6/0x2980 [ 2361.825700] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2361.826765] ? wait_for_completion_io+0x270/0x270 [ 2361.827811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.828950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.830040] do_syscall_64+0x33/0x40 [ 2361.830834] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.831913] RIP: 0033:0x7f7213914b19 [ 2361.832701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.836601] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2361.838246] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2361.839750] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2361.841299] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2361.842813] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2361.844312] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2361.848846] Module has invalid ELF structures [ 2361.867089] audit: type=1107 audit(1774543892.222:631): pid=18168 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:51:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a00}, 0x0) 16:51:32 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x80000}, 0x0) 16:51:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:51:32 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2361.993182] audit: type=1107 audit(1774543892.349:632): pid=18182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2361.994816] Module has invalid ELF structures [ 2362.000573] audit: type=1107 audit(1774543892.356:633): pid=18184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:32 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000930000/0x4000)=nil, 0x4000, 0x8, 0x10010, r0, 0x36e1b000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x210000, 0x102) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000000)={0x400, 0x30, 0x1d}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}, 0x400) [ 2362.014856] Module has invalid ELF structures 16:51:32 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffff}, 0x0) 16:51:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9f00}, 0x0) 16:51:32 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 20) 16:51:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 16:51:32 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2362.143903] audit: type=1107 audit(1774543892.500:634): pid=18197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2362.152753] audit: type=1107 audit(1774543892.509:635): pid=18199 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2362.154002] FAULT_INJECTION: forcing a failure. [ 2362.154002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2362.157294] CPU: 1 PID: 18202 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2362.158786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.160571] Call Trace: [ 2362.161177] dump_stack+0x107/0x167 [ 2362.161972] should_fail.cold+0x5/0xa [ 2362.162817] _copy_to_user+0x2e/0x180 [ 2362.163653] io_uring_setup+0x11b5/0x2980 [ 2362.164565] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.165689] ? wait_for_completion_io+0x270/0x270 [ 2362.166771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.167897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.169055] do_syscall_64+0x33/0x40 [ 2362.169865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.170964] RIP: 0033:0x7f7213914b19 [ 2362.171765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.175765] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.177443] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2362.178984] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2362.180533] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2362.182094] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2362.183632] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2362.222832] Module has invalid ELF structures 16:51:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 16:51:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 21) 16:51:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2376.464729] audit: type=1107 audit(1774543906.820:636): pid=18222 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2376.469264] Module has invalid ELF structures [ 2376.488811] FAULT_INJECTION: forcing a failure. [ 2376.488811] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.490673] CPU: 1 PID: 18230 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2376.491864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.493300] Call Trace: [ 2376.493768] dump_stack+0x107/0x167 [ 2376.494405] should_fail.cold+0x5/0xa [ 2376.495070] ? __d_alloc+0x2a/0x990 [ 2376.495701] should_failslab+0x5/0x20 [ 2376.496359] kmem_cache_alloc+0x5b/0x310 [ 2376.497085] __d_alloc+0x2a/0x990 [ 2376.497681] ? find_held_lock+0x2c/0x110 [ 2376.498379] d_alloc_pseudo+0x19/0x70 [ 2376.498956] alloc_file_pseudo+0xce/0x250 [ 2376.499678] ? trace_hardirqs_on+0x5b/0x180 [ 2376.500334] audit: type=1107 audit(1774543906.853:637): pid=18227 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:51:46 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x600082, 0x186) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb0f0d80e8ce29ee2, 0x1010, r1, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pkey_mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) r5 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd_index=0xa, 0x0, {0x0, r0}, 0x2, 0x8, 0x1, {0x0, 0x0, r0}}, 0x1000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x8000000) r7 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r11, 0x0, &(0x7f0000000400)="1f98a633fa642bbc095e926418738160f2d3c432506dc0b44196ae1a4d306ad9ea7ffc953f4e55f9d091cf846257e1687467e27aab886b496f36965f2ccb8c7394a1a8c888711c1b730b6b57642b235326146636fe937cd9394ff837b2d9209911da01976de96344d018807bc03a7972b8fd8aa25ff10740cbe8500b87d6a35bcfa499aa4da2043265239cd305587110128872537e22ea3d0f82b422ce10852244c0e72a28f34fa7a67d34998a860dc95b215ba53f6d1e5ec78cde2fba6d7370d3b87ec42408605036ada8318230d4d409d0475901b5", 0xd6, 0x20, 0x1, {0x0, r12}}, 0x101) sigaltstack(&(0x7f0000003000/0x1000)=nil, &(0x7f0000000000)) 16:51:46 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa802, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7, 0x8000}, {0x9, 0x101}]}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c653000be529be456376bd138632ceec0c38505cf98755ff3005c614df6daca39cdf6e1"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x11, 0x30, r3, 0x0) 16:51:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf000}, 0x0) 16:51:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x1000000}, 0x0) 16:51:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2376.500416] ? alloc_file+0x5a0/0x5a0 [ 2376.500446] anon_inode_getfile+0xc8/0x1f0 [ 2376.500467] io_uring_setup+0x138b/0x2980 [ 2376.500492] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2376.505978] ? wait_for_completion_io+0x270/0x270 [ 2376.506696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.507460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.508217] do_syscall_64+0x33/0x40 [ 2376.508766] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2376.509526] RIP: 0033:0x7f7213914b19 [ 2376.510064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.512750] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2376.513855] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2376.514892] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2376.515915] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2376.516936] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2376.517970] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:51:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x2000000}, 0x0) 16:51:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x10010, r1, 0x8000000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 16:51:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2376.600997] Module has invalid ELF structures [ 2376.613185] Module has invalid ELF structures [ 2376.642984] audit: type=1107 audit(1774543906.999:638): pid=18243 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x80000}, 0x0) 16:52:00 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x3000000}, 0x0) 16:52:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) r1 = syz_io_uring_setup(0x4452, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r7, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r5, 0x2, {0x0, r0}, 0xfffffffd, 0x15, 0x0, {0x0, r6, r7}}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r0, 0x0) 16:52:00 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 22) 16:52:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 16:52:00 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:00 executing program 6: sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2cf10000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25010000000c00060000000000000000000c0006000100000001000000d0d64f0a8de2f31f6b257a180fce97991481371fc7d6648419335c3dcc72b29c0f4b0d2d829ae143d9964e208d29d8775848b28b9c38240e306015c1b5c20ab1cc37733fa8b20c1964cb00fbd692f817de542bf763ee9de725cd6faee1df88de376eba66a0930d8a8820898bb215481c4a11238ba71654c999738328d1909bade59e9e1dd40b5eb3829348f1c165ebf8d03815fdc2505e9698c0a7c6c6970599f6547df096f28745e15ddac81e072c7c747dac4fec8363"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00aff807d36f"], 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090d000000000000f70001"], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x7, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 16:52:00 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2390.186071] audit: type=1107 audit(1774543920.542:639): pid=18251 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2390.197033] FAULT_INJECTION: forcing a failure. [ 2390.197033] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.200004] CPU: 1 PID: 18259 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2390.201772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.203902] Call Trace: [ 2390.204576] dump_stack+0x107/0x167 [ 2390.205531] should_fail.cold+0x5/0xa [ 2390.206499] ? create_object.isra.0+0x3a/0xa30 [ 2390.207604] audit: type=1107 audit(1774543920.562:640): pid=18256 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2390.207679] should_failslab+0x5/0x20 [ 2390.210129] kmem_cache_alloc+0x5b/0x310 [ 2390.211166] create_object.isra.0+0x3a/0xa30 [ 2390.212292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2390.213604] kmem_cache_alloc+0x159/0x310 [ 2390.214676] __d_alloc+0x2a/0x990 [ 2390.215552] ? find_held_lock+0x2c/0x110 [ 2390.216581] d_alloc_pseudo+0x19/0x70 [ 2390.217563] alloc_file_pseudo+0xce/0x250 [ 2390.218619] ? trace_hardirqs_on+0x5b/0x180 [ 2390.219716] ? alloc_file+0x5a0/0x5a0 [ 2390.220713] anon_inode_getfile+0xc8/0x1f0 [ 2390.221816] io_uring_setup+0x138b/0x2980 [ 2390.222890] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2390.224181] ? wait_for_completion_io+0x270/0x270 [ 2390.225447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.226800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2390.228137] do_syscall_64+0x33/0x40 [ 2390.229072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2390.230321] RIP: 0033:0x7f7213914b19 [ 2390.231118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2390.235035] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2390.236658] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2390.238179] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2390.239684] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2390.241209] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2390.242718] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2390.260941] Module has invalid ELF structures 16:52:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffff}, 0x0) [ 2390.275139] Module has invalid ELF structures [ 2390.279987] audit: type=1107 audit(1774543920.636:641): pid=18270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:00 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4000000}, 0x0) [ 2390.294700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 16:52:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x3, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x1}, 0x900000) 16:52:00 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x1000000}, 0x0) 16:52:00 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 16:52:00 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2390.349301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 16:52:00 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 23) [ 2390.365147] audit: type=1107 audit(1774543920.721:642): pid=18279 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2390.375830] audit: type=1107 audit(1774543920.732:643): pid=18280 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2390.397567] Module has invalid ELF structures [ 2390.416410] FAULT_INJECTION: forcing a failure. [ 2390.416410] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.417849] CPU: 0 PID: 18289 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2390.418652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.419613] Call Trace: [ 2390.419930] dump_stack+0x107/0x167 [ 2390.420353] should_fail.cold+0x5/0xa [ 2390.420804] ? __alloc_file+0x21/0x320 [ 2390.421263] should_failslab+0x5/0x20 [ 2390.421704] kmem_cache_alloc+0x5b/0x310 [ 2390.422178] __alloc_file+0x21/0x320 [ 2390.422610] alloc_empty_file+0x6d/0x170 [ 2390.423077] alloc_file+0x5e/0x5a0 [ 2390.423492] alloc_file_pseudo+0x16a/0x250 [ 2390.423974] ? alloc_file+0x5a0/0x5a0 [ 2390.424421] anon_inode_getfile+0xc8/0x1f0 [ 2390.424917] io_uring_setup+0x138b/0x2980 [ 2390.425408] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2390.425995] ? wait_for_completion_io+0x270/0x270 [ 2390.426567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.427171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2390.427766] do_syscall_64+0x33/0x40 [ 2390.428195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2390.428785] RIP: 0033:0x7f7213914b19 [ 2390.429220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2390.431335] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2390.432219] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2390.433046] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2390.433879] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2390.434698] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2390.435526] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2390.458776] Module has invalid ELF structures [ 2405.138142] Module has invalid ELF structures 16:52:15 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 24) 16:52:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) syz_io_uring_setup(0x389b, &(0x7f0000000040)={0x0, 0xd1a1, 0x8, 0x1, 0x76, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:52:15 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:15 executing program 6: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x8e5d, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x72ea4000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, r2, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r5, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r4, 0x0, r5, 0x2, 0x0, 0x0, {0x0, r6}}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:52:15 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x5000000}, 0x0) 16:52:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x2000000}, 0x0) 16:52:15 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) [ 2405.148966] audit: type=1107 audit(1774543935.505:644): pid=18303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:15 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2405.170150] audit: type=1107 audit(1774543935.526:645): pid=18313 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2405.189170] FAULT_INJECTION: forcing a failure. [ 2405.189170] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.191900] CPU: 0 PID: 18318 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2405.193525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2405.195459] Call Trace: [ 2405.196080] dump_stack+0x107/0x167 [ 2405.196937] should_fail.cold+0x5/0xa [ 2405.197829] ? create_object.isra.0+0x3a/0xa30 [ 2405.198899] should_failslab+0x5/0x20 [ 2405.199791] kmem_cache_alloc+0x5b/0x310 [ 2405.200745] create_object.isra.0+0x3a/0xa30 [ 2405.201778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2405.202944] kmem_cache_alloc+0x159/0x310 16:52:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x3000000}, 0x0) [ 2405.203896] __alloc_file+0x21/0x320 [ 2405.204915] alloc_empty_file+0x6d/0x170 [ 2405.205869] alloc_file+0x5e/0x5a0 [ 2405.206687] alloc_file_pseudo+0x16a/0x250 [ 2405.207658] ? alloc_file+0x5a0/0x5a0 [ 2405.208548] anon_inode_getfile+0xc8/0x1f0 [ 2405.209534] io_uring_setup+0x138b/0x2980 [ 2405.210492] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2405.211642] ? wait_for_completion_io+0x270/0x270 [ 2405.212779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2405.213988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2405.215185] do_syscall_64+0x33/0x40 [ 2405.216049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2405.217234] RIP: 0033:0x7f7213914b19 [ 2405.218092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2405.222264] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2405.223991] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2405.225651] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2405.227300] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2405.228937] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2405.230568] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:52:15 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6000000}, 0x0) [ 2405.234094] audit: type=1107 audit(1774543935.585:646): pid=18323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2405.236815] audit: type=1107 audit(1774543935.585:647): pid=18324 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2405.243023] Module has invalid ELF structures [ 2405.247999] Module has invalid ELF structures 16:52:29 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 25) 16:52:29 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7000000}, 0x0) 16:52:29 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:29 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4000000}, 0x0) 16:52:29 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 16:52:29 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x7ab8, &(0x7f0000000000)={0x0, 0xce80, 0x8, 0x2, 0x351, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, 0x90}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000640)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd_index=0x3, 0x2, 0x2, 0x80000000, 0x4, 0x0, {0x2}}, 0x7) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r7, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xff}, 0x69f) r13 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r15 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r13, 0x10000000) syz_io_uring_submit(0x0, r15, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r14}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@llc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/28, 0x1c}], 0x4, &(0x7f00000004c0)=""/145, 0x91}, 0x0, 0x2201, 0x1, {0x2, r14}}, 0x80000001) 16:52:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0xc}, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2419.513191] audit: type=1107 audit(1774543949.869:648): pid=18443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2419.533149] audit: type=1107 audit(1774543949.889:649): pid=18448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2419.538213] Module has invalid ELF structures [ 2419.541044] FAULT_INJECTION: forcing a failure. [ 2419.541044] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.542358] CPU: 0 PID: 18454 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2419.543152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.544108] Call Trace: [ 2419.544418] dump_stack+0x107/0x167 [ 2419.544845] should_fail.cold+0x5/0xa [ 2419.545286] ? security_file_alloc+0x34/0x170 [ 2419.545808] should_failslab+0x5/0x20 [ 2419.546251] kmem_cache_alloc+0x5b/0x310 [ 2419.546719] security_file_alloc+0x34/0x170 [ 2419.547218] __alloc_file+0xb7/0x320 [ 2419.547648] alloc_empty_file+0x6d/0x170 [ 2419.548116] alloc_file+0x5e/0x5a0 [ 2419.548525] alloc_file_pseudo+0x16a/0x250 [ 2419.549015] ? alloc_file+0x5a0/0x5a0 [ 2419.549466] anon_inode_getfile+0xc8/0x1f0 [ 2419.549973] io_uring_setup+0x138b/0x2980 [ 2419.550461] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.551044] ? wait_for_completion_io+0x270/0x270 [ 2419.551621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.552235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.552834] do_syscall_64+0x33/0x40 [ 2419.553264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.553859] RIP: 0033:0x7f7213914b19 [ 2419.554290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.556421] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.557294] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2419.558122] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2419.558947] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2419.559766] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2419.560580] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2419.564232] Module has invalid ELF structures 16:52:29 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x5000000}, 0x0) 16:52:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 16:52:29 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) io_uring_enter(r1, 0x4020, 0xb24f, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) 16:52:29 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa000000}, 0x0) 16:52:30 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 26) 16:52:30 executing program 6: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x7, 0xffff, 0x6}) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x4010, r0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 2419.667166] audit: type=1107 audit(1774543950.023:650): pid=18464 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2419.677814] Module has invalid ELF structures [ 2419.686052] audit: type=1107 audit(1774543950.042:651): pid=18466 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:30 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2419.708126] FAULT_INJECTION: forcing a failure. [ 2419.708126] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.710615] CPU: 1 PID: 18474 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2419.712116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.713899] Call Trace: [ 2419.714457] dump_stack+0x107/0x167 [ 2419.715233] should_fail.cold+0x5/0xa [ 2419.716033] ? security_file_alloc+0x34/0x170 [ 2419.716991] should_failslab+0x5/0x20 [ 2419.717785] kmem_cache_alloc+0x5b/0x310 [ 2419.718838] security_file_alloc+0x34/0x170 [ 2419.719974] __alloc_file+0xb7/0x320 16:52:30 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf000000}, 0x0) [ 2419.721112] alloc_empty_file+0x6d/0x170 [ 2419.722193] alloc_file+0x5e/0x5a0 [ 2419.722949] alloc_file_pseudo+0x16a/0x250 [ 2419.723828] ? alloc_file+0x5a0/0x5a0 [ 2419.724636] anon_inode_getfile+0xc8/0x1f0 [ 2419.725526] io_uring_setup+0x138b/0x2980 [ 2419.726393] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.727450] ? wait_for_completion_io+0x270/0x270 [ 2419.728472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.729585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.730676] do_syscall_64+0x33/0x40 16:52:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x20010, r1, 0x8000000) [ 2419.731459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.732642] RIP: 0033:0x7f7213914b19 [ 2419.733431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.737217] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.738890] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2419.740374] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2419.741866] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2419.743351] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2419.744849] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2419.755065] Module has invalid ELF structures [ 2419.759606] audit: type=1107 audit(1774543950.115:652): pid=18479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:30 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:30 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6000000}, 0x0) 16:52:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 16:52:30 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:30 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x28010000}, 0x0) [ 2419.843836] Module has invalid ELF structures [ 2419.844709] audit: type=1107 audit(1774543950.200:653): pid=18492 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2419.852558] audit: type=1107 audit(1774543950.207:654): pid=18490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2419.859848] Module has invalid ELF structures [ 2434.993224] audit: type=1107 audit(1774543965.349:655): pid=18509 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2435.004664] audit: type=1107 audit(1774543965.360:656): pid=18512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:45 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4800}, 0x0) 16:52:45 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r2, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:45 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:45 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x7fffe000, 0x0, 0x0, 0x0) 16:52:45 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x48000000}, 0x0) 16:52:45 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 27) 16:52:45 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7000000}, 0x0) 16:52:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1eb}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="3e84736152b7e3e57b7be703bc29b631e85672be4da56276e91a62310dd5e07dcdffdef5110137b5825e4ea2626e88f24a5aad58b595f0f7ba5bc947ea7589e3360878e80103536b2f7eb1966f62bdc2829e316a3d45671ef694dc905b12fe59437ec8fec249f12ae4062cc82368b56560941fdcebec257d944541c0ebb74744c9f80f62ae2769690ea86aefcef1e96966d9cc07d83d1397b3c87914cc72ad3b76a351d0dc05298be36c37264c0c4e9dff95ee45c6676d940763a20da1ab88d04eeceb4cbf2fab1c4b25785f2bffe7b74f6d70200a09527e8f9f637e58e2e267d4db558d616de9c9", 0xe8, 0x7fffffff}], 0x4000, &(0x7f0000000440)={[{@size={'size', 0x3d, [0x74, 0x37, 0x37]}}, {@size={'size', 0x3d, [0x6d, 0x39]}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2c, 0x39]}}}}, {@huge_never}, {@size={'size', 0x3d, [0x2d, 0x67, 0x38]}}, {@mode={'mode', 0x3d, 0x800}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, ')^&!+\''}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x301080, 0x0) [ 2435.021959] FAULT_INJECTION: forcing a failure. [ 2435.021959] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.023697] CPU: 1 PID: 18517 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2435.024688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2435.025895] Call Trace: [ 2435.026283] dump_stack+0x107/0x167 [ 2435.026808] should_fail.cold+0x5/0xa [ 2435.027358] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2435.028099] should_failslab+0x5/0x20 [ 2435.028644] kmem_cache_alloc_trace+0x55/0x320 [ 2435.029305] io_uring_alloc_task_context+0x99/0x6a0 [ 2435.030479] ? io_import_iovec+0x1120/0x1120 [ 2435.031614] ? lock_downgrade+0x6d0/0x6d0 [ 2435.032656] ? do_raw_spin_lock+0x121/0x260 [ 2435.033760] ? rwlock_bug.part.0+0x90/0x90 [ 2435.034773] __io_uring_add_tctx_node+0x2c6/0x520 [ 2435.035747] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2435.036804] ? alloc_fd+0x2e7/0x670 [ 2435.037552] io_uring_setup+0x1fbb/0x2980 [ 2435.038408] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2435.039439] ? wait_for_completion_io+0x270/0x270 [ 2435.040440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2435.041501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2435.042563] do_syscall_64+0x33/0x40 [ 2435.043317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2435.044358] RIP: 0033:0x7f7213914b19 [ 2435.045113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2435.048845] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2435.050397] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2435.051846] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2435.053288] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2435.054750] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2435.056206] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:52:45 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c000000}, 0x0) [ 2435.075169] Module has invalid ELF structures [ 2435.078308] loop4: detected capacity change from 0 to 135266304 [ 2435.080289] audit: type=1107 audit(1774543965.436:657): pid=18510 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2435.086995] tmpfs: Bad value for 'size' [ 2435.102825] Module has invalid ELF structures [ 2435.109431] loop4: detected capacity change from 0 to 135266304 [ 2435.113131] tmpfs: Bad value for 'size' 16:52:45 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa000000}, 0x0) 16:52:45 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r2, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2435.148944] audit: type=1107 audit(1774543965.505:658): pid=18525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:45 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 16:52:45 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 28) 16:52:45 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2435.231645] audit: type=1107 audit(1774543965.587:659): pid=18532 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2435.232389] Module has invalid ELF structures 16:52:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x200000, 0x1, 0x3, 0x1f5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3b90, &(0x7f0000000000)={0x0, 0xed8d, 0x0, 0x0, 0x240, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r6, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x1a003, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000007740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000077c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xffffffff, &(0x7f0000007780)=[r0, r6, r7, r0, r0, r0, r0, r0, r8], 0x9, 0x0, 0x0, {0x0, r9}}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2435.289723] FAULT_INJECTION: forcing a failure. [ 2435.289723] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.292249] CPU: 1 PID: 18541 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2435.293755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2435.295538] Call Trace: [ 2435.296108] dump_stack+0x107/0x167 [ 2435.296894] should_fail.cold+0x5/0xa [ 2435.297724] ? create_object.isra.0+0x3a/0xa30 [ 2435.298694] should_failslab+0x5/0x20 [ 2435.299525] kmem_cache_alloc+0x5b/0x310 [ 2435.300392] create_object.isra.0+0x3a/0xa30 [ 2435.301328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2435.302530] kmem_cache_alloc_trace+0x151/0x320 [ 2435.303584] io_uring_alloc_task_context+0x99/0x6a0 [ 2435.304689] ? io_import_iovec+0x1120/0x1120 [ 2435.304803] Module has invalid ELF structures [ 2435.305632] ? lock_downgrade+0x6d0/0x6d0 [ 2435.305652] ? do_raw_spin_lock+0x121/0x260 [ 2435.305685] ? rwlock_bug.part.0+0x90/0x90 [ 2435.309464] __io_uring_add_tctx_node+0x2c6/0x520 [ 2435.310589] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2435.311715] ? alloc_fd+0x2e7/0x670 [ 2435.312605] io_uring_setup+0x1fbb/0x2980 [ 2435.313583] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2435.314753] ? wait_for_completion_io+0x270/0x270 [ 2435.315940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2435.317129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2435.318230] do_syscall_64+0x33/0x40 [ 2435.319016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2435.320176] RIP: 0033:0x7f7213914b19 [ 2435.321071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2435.325015] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2435.326968] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2435.328435] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2435.329920] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2435.331387] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2435.332868] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2449.037384] audit: type=1107 audit(1774543979.393:660): pid=18552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:59 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 29) 16:52:59 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x68000000}, 0x0) 16:52:59 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 16:52:59 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r2, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 16:52:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf000000}, 0x0) 16:52:59 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x400100, 0x2a) r1 = syz_io_uring_setup(0x4d52, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x2cd, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2449.050898] audit: type=1107 audit(1774543979.405:661): pid=18557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2449.062667] Module has invalid ELF structures [ 2449.068297] FAULT_INJECTION: forcing a failure. [ 2449.068297] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.070409] CPU: 0 PID: 18564 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2449.071643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.073138] Call Trace: [ 2449.073621] dump_stack+0x107/0x167 [ 2449.074283] should_fail.cold+0x5/0xa [ 2449.074970] ? create_object.isra.0+0x3a/0xa30 [ 2449.075790] should_failslab+0x5/0x20 [ 2449.076479] kmem_cache_alloc+0x5b/0x310 [ 2449.077217] create_object.isra.0+0x3a/0xa30 [ 2449.078024] kmemleak_alloc_percpu+0xa0/0x100 [ 2449.078833] pcpu_alloc+0x4e2/0x1240 [ 2449.079517] __percpu_counter_init+0x10d/0x2d0 [ 2449.080349] io_uring_alloc_task_context+0xcc/0x6a0 [ 2449.081246] ? io_import_iovec+0x1120/0x1120 [ 2449.082050] ? lock_downgrade+0x6d0/0x6d0 [ 2449.082798] ? do_raw_spin_lock+0x121/0x260 [ 2449.083570] ? rwlock_bug.part.0+0x90/0x90 [ 2449.084330] __io_uring_add_tctx_node+0x2c6/0x520 [ 2449.085202] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.086154] ? alloc_fd+0x2e7/0x670 [ 2449.086824] io_uring_setup+0x1fbb/0x2980 [ 2449.087583] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.088485] ? wait_for_completion_io+0x270/0x270 [ 2449.089377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.090321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.091255] do_syscall_64+0x33/0x40 [ 2449.091933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.092868] RIP: 0033:0x7f7213914b19 [ 2449.093549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.096893] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.098284] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2449.099578] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2449.100873] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2449.102171] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2449.103464] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2449.114343] Module has invalid ELF structures [ 2449.128373] audit: type=1107 audit(1774543979.484:662): pid=18569 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:52:59 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:52:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x48000000}, 0x0) [ 2449.150049] Module has invalid ELF structures 16:52:59 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c000000}, 0x0) [ 2449.201845] audit: type=1107 audit(1774543979.558:663): pid=18578 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:14 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 30) 16:53:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c000000}, 0x0) 16:53:14 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x74000000}, 0x0) 16:53:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:14 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:14 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 16:53:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 16:53:14 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) [ 2464.370935] FAULT_INJECTION: forcing a failure. [ 2464.370935] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.373305] CPU: 0 PID: 18591 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2464.374737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.376428] Call Trace: [ 2464.376979] dump_stack+0x107/0x167 [ 2464.377730] should_fail.cold+0x5/0xa [ 2464.378524] ? create_object.isra.0+0x3a/0xa30 [ 2464.379453] should_failslab+0x5/0x20 [ 2464.380233] kmem_cache_alloc+0x5b/0x310 [ 2464.381079] create_object.isra.0+0x3a/0xa30 [ 2464.382003] kmemleak_alloc_percpu+0xa0/0x100 [ 2464.382931] pcpu_alloc+0x4e2/0x1240 [ 2464.383718] __percpu_counter_init+0x10d/0x2d0 [ 2464.384668] io_uring_alloc_task_context+0xcc/0x6a0 [ 2464.385702] ? io_import_iovec+0x1120/0x1120 [ 2464.386606] ? lock_downgrade+0x6d0/0x6d0 [ 2464.387480] ? do_raw_spin_lock+0x121/0x260 [ 2464.388356] ? rwlock_bug.part.0+0x90/0x90 [ 2464.389225] __io_uring_add_tctx_node+0x2c6/0x520 [ 2464.390224] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.391286] ? alloc_fd+0x2e7/0x670 [ 2464.392054] io_uring_setup+0x1fbb/0x2980 [ 2464.392904] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2464.394009] ? wait_for_completion_io+0x270/0x270 [ 2464.395027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.396094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.397143] do_syscall_64+0x33/0x40 [ 2464.397909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.398961] RIP: 0033:0x7f7213914b19 [ 2464.399710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.403443] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2464.404998] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2464.406449] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2464.407887] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2464.409331] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2464.410789] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2464.416604] audit: type=1107 audit(1774543994.735:664): pid=18590 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2464.424588] audit: type=1107 audit(1774543994.780:665): pid=18588 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2464.445813] Module has invalid ELF structures 16:53:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000edf834bbe5d67d6f82"]) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6ed3, 0x10000) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x3, 0xb, 0x36e, 0x42, "bb139c3b910427c360bc1f2f9077277c5364d5870fa53bde1ece944b2ad26f7c12a2355280a7af7db15d108801bf18c05d3d9f7e14adfaaa83fc7203f3c359d48085"}, 0x4b, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x402b830, r1, 0x8000000) 16:53:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x68000000}, 0x0) 16:53:14 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:14 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a000000}, 0x0) 16:53:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 16:53:14 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa000000}, 0x0) [ 2464.540388] audit: type=1107 audit(1774543994.896:666): pid=18604 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2464.590727] audit: type=1107 audit(1774543994.947:667): pid=18609 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2464.619296] audit: type=1107 audit(1774543994.975:668): pid=18615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) execveat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=[&(0x7f0000000080)='!@[%@+-\x00', &(0x7f00000000c0)='-\\]\x00', &(0x7f0000000100)='\x00', &(0x7f0000000180)='#])\xbe)[])-/]#^!\x00', &(0x7f00000001c0)='\xda!@@+:{$(@y%\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='(&\\\x00', &(0x7f00000003c0)='\x00'], 0x1000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5437ddf76b307141, 0x50, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2464.652769] Module has invalid ELF structures 16:53:15 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 31) 16:53:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c000000}, 0x0) 16:53:15 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9effffff}, 0x0) 16:53:15 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:15 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2464.725271] audit: type=1107 audit(1774543995.080:669): pid=18624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) [ 2464.762817] FAULT_INJECTION: forcing a failure. [ 2464.762817] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.765539] CPU: 1 PID: 18630 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2464.767202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.769196] Call Trace: [ 2464.769833] dump_stack+0x107/0x167 [ 2464.770725] should_fail.cold+0x5/0xa [ 2464.771639] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2464.772905] should_failslab+0x5/0x20 [ 2464.773823] kmem_cache_alloc_trace+0x55/0x320 [ 2464.774937] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2464.776159] ? io_import_iovec+0x1120/0x1120 [ 2464.777233] ? lock_downgrade+0x6d0/0x6d0 [ 2464.778249] ? do_raw_spin_lock+0x121/0x260 [ 2464.779299] ? rwlock_bug.part.0+0x90/0x90 [ 2464.780349] __io_uring_add_tctx_node+0x2c6/0x520 [ 2464.781536] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.782815] ? alloc_fd+0x2e7/0x670 [ 2464.783719] io_uring_setup+0x1fbb/0x2980 [ 2464.784614] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2464.785846] ? wait_for_completion_io+0x270/0x270 [ 2464.787067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.788378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.789665] do_syscall_64+0x33/0x40 [ 2464.790593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.791851] RIP: 0033:0x7f7213914b19 [ 2464.792767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.797063] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2464.798892] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2464.799110] Module has invalid ELF structures [ 2464.800500] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2464.800512] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2464.800524] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2464.800535] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2464.808910] audit: type=1107 audit(1774543995.160:670): pid=18628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2479.305120] audit: type=1107 audit(1774544009.661:671): pid=18648 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2479.314080] FAULT_INJECTION: forcing a failure. [ 2479.314080] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.316620] CPU: 0 PID: 18652 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2479.318149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2479.319972] Call Trace: [ 2479.320553] dump_stack+0x107/0x167 [ 2479.321345] should_fail.cold+0x5/0xa [ 2479.322184] ? create_object.isra.0+0x3a/0xa30 [ 2479.323180] should_failslab+0x5/0x20 [ 2479.324006] kmem_cache_alloc+0x5b/0x310 [ 2479.324885] create_object.isra.0+0x3a/0xa30 [ 2479.325834] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2479.326953] kmem_cache_alloc_trace+0x151/0x320 [ 2479.327966] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2479.329070] ? io_import_iovec+0x1120/0x1120 [ 2479.330329] ? lock_downgrade+0x6d0/0x6d0 [ 2479.331240] ? do_raw_spin_lock+0x121/0x260 [ 2479.332184] ? rwlock_bug.part.0+0x90/0x90 [ 2479.333118] __io_uring_add_tctx_node+0x2c6/0x520 [ 2479.334186] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2479.335323] ? alloc_fd+0x2e7/0x670 [ 2479.336128] io_uring_setup+0x1fbb/0x2980 [ 2479.337035] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2479.338132] ? wait_for_completion_io+0x270/0x270 [ 2479.339196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2479.340325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2479.341444] do_syscall_64+0x33/0x40 [ 2479.342255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2479.343357] RIP: 0033:0x7f7213914b19 [ 2479.344155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2479.348117] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2479.349756] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2479.351298] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2479.352829] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2479.354359] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2479.355886] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:53:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 16:53:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000004c0)={0x1, 0x1, 0x1000, 0x98, &(0x7f0000000400)="02b29bedc7cabc96ec4bdcbf82e35e33a7a790c477b3e0edeabb17e80fba54ceeac3d6736274cc84297953630921996e0d1f4cfee6148812185ffcb9a0d6239d1a8cdb54076e3924a12b145b3b67d2fce5c89b3b84b4af2e9e484a7590b0d0b41c12a38b0ac46c3a779a1a0a27b4b54e282c0925391955dfc2ff3c666330a572df7fa29cac926f596360ab263076c03c0921eb99b2c56ed6", 0x1000, 0x0, &(0x7f0000000900)="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"}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r6, 0x0) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r7, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r8}}, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r10, &(0x7f0000000080)={0x128002011}, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x3) r11 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r11, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000000)=[r11], 0x1}, 0xffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001900)={0x1200, 0x1b, 0x200, 0x70bd2a, 0x25dfdbfd, {0x14}, [@nested={0x10c8, 0x8e, 0x0, 0x1, [@typed={0x14, 0x21, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast1}, @generic="b0c92a50d7e926e66c41f5ea249a4aa77f4e5aaef82f78a14c22ece0657cb7651a721e74c7ed8780451ec1649af106b0f2db3e4802fcacf7faa3daa196e2f062ea16540f7e4d6bc710b1c6bafa30b6e46c2cf7769d22e0e2c03fa54ac9982b97ae5a5ef80e466a999b4c234771ed1e7497214280bc078814c9f3767801ec847bb32945236afc91d152afe2ca4e46f4e326663aefbe923bac195faaae", @generic="56b2f8fa85e2fa40fa09b531c138a8037e1c35de6023f002091d646ebc96a066b4e6b5a7c7f0b8398fcbd8b3e94d57dd80fb7f03945ddf43dd09b4ace30cd10cd24895e7c1dcd1102ed62bde7511fde8b807978fb3351aa7564d114217c37dd2ac3a3cb276b8886c4d90d5ae6a3ed361a2b9f986aef82d6fb8b7c03376e5eb80807a1e56abe43967386244a69b999e13a3970f78c5fb8e45a679dd11e80c6ec2eabe66e411046a403b2b91744e38a37356445a073df944c63511adc5a4115813e07b5322a3ae126c941b33c691f53dfec93285b556737f935127410662449670d2824ee4b99d9bacef40f6c87f00678c109635de59e48a0a810bcf532097a2a34ee80519776ac5d370683c80c4b3647bce1abb44057461f23023e4f3af28366e0442ab606f67dd73a582823dcf3aa226c7c4d2f9050598507beb86e7b06d3452d1b7a7a56cfd45b6602720b77555b6a1693475bcef3efedebc350efeedf34249c68b71a03b1bf0ffeda5541bb387e88b2faea6e90d036e847c566a3c4669975ee04b57521080acb87ef8ab895cd897d1e9ebb04de7c320b82aa7dea391e98cd8486a4ea550e07a57dd56a64b9509a1506389e685ab32dab31248b1b4479b5a40231f6faade27202a32760698e93e5b00922ed6011bd227b3b9b608132b0daca2193b51f97d44fa00d970e8a5a0544a4663adc096e6b54a93a7931b975f62f1c97627eb455da74f511a33d18a4e514d87107ae07cb6994ba793b00e86495cdefb2a2978b3534bdffa8e7c462b649d47aa0526842c1d76eff13d99f8fb3fbbbf1ed9f109f564029669a22bce5036f662177837f19763ff38f2d0c0d2cf1f97460d53612efb9fea7ef8e87167cf3696f6c066fc6ad2c42c1df91d521410b253ed9c71e4566dd9c63dfd50540953899e4717595f4eecaff0c389c132a58e952de569197ed27129b8d34e8f568654b48fd144dfdff901da6b88d1a5ef99be0f13dc4e8aa03b5c3e339e2743e7f61cf31bfcfdf91da61da30b96d9e2f3a97d7ed4bfdc7bb08581e654396016fd5da3acca204f3a29b417f40b8aa179b681d0b20f163404c992d29b51f686be38086ad003d5470dd02e283fa16d8562c8f8769ca7642e02649d832bc906e0c3c7769f7c875ba72eafdfcf27d3df3121d082a86ffb0e192c540a3ecab822df32336278fca647cfb40ecf62daee0d1875727fefe7d89ab0007d50690128d3a95b0c419682841315280fa6337001dcaf1bcc6517f86c04fb03115dd939a19fc37ba08fe34b557ab46043de5c727116b9e8d63bbac1bef018cf0104bbe9f4a724b0e2e91ae44ccf4f9e8f3bc2af289690849d547447f6d898cf5080341cca6b7576f90a4c45f79e0bfd30894960acb81a7dae243d858a79dc48516fb79d4fc415d18e7c065615a5a8c72bfe6c44070c6407f5a1ef8d39a269b988ce05f76f6367f81f0116d9545f7abeeb4f3d04760408cf70ec50052a43f9677c7b0d505fcc9ffb6860e1b4f8a7f65cd865b855527cbf97ccdaa2ad282974e37fa85c1422d3b8a10a7623fdba4271c6edebf1f4144bc9734ecac1daee6fbdf6a0542d0a2a3f274b46fdcd403560ab2ae0f906034dd067596a938bf261803e3fa0c3f97f50fb6b2c62f8cab53f160921873e7a4f2993dc5c749cce9e0a7353a56939435e09dbb9e4b72771b023d56850c19868ba22e777e582b109b22b5923b1cc8bdbac2e207f01ec6d8a0a3eb73e94392245613ac489c78a0abda032930ff0549d620f9ea9086f8701aedbcca1d33c973d1ea761d98547761d12343b7fbf269a9d282518559bba8e49557e5e7d8148b38aa9717f40085692dd112ab5a3ea1af9488d71a39d48f0c58cdf6b02283d160d9a1f19e638af93a5e6deb673d422a7e25a4c0d8fb293bdf470876cce77649e98969d689ec44c6e23da283313ee473b58bf8742ea9a0a017bb89ac5af367d8e25c993ce77afa2f044bd9974a464620fc86325cf092d942ed00a0f124d09aeed1f70ebcd5f811d3baf0b68c6c359435e2bc508337208c50fbeec9974e5da286275cc14316b22502c64a60f4a4ad3d6e6a02a99918dcc43842619348ec54082325700fbdc89dd3c4b670466f60e39ba50f1135ce701fd4029576e55121ae7f353ceb010d4265792deaa41c26ccbe570d4415227134e858a673191015e038b1d4f625d4d50bca8da390e02914c56f64dd2c9e8a774ddf4b70261de2308c8c1a11aa443a93929be1bf615031169e5df708e86c4376fddfc0a3e10ab3cf45c1b9c4ea54f9e5319f3ba885ee3fdc00e3831ed6c9e8d0dcb06bc6b7039b47d938eac338a96c4fd47f3697aeecbbec508a89dfa0a3319f29b17ab0b512571911c9bc13b7580b8774cc9c4600972b7373cc2ed2d967c840da0172327b1d2082209342030491dba1c7f3b7c13da80c687e3a3d1c8b6a2d63e71936e972931e644aaf6fdb6e0a72ee762f425ad17b10b950e038023f6517f4bd8f5099e4431b9a50d185a428e6c63857add59b4c6260c60856e8d5d8c120e1aafdf3c4a051cf2e5423435316ca90c4afbc56b0d193a432db8263ce9db3d0a7c713ba9c7a7990dd004958b87f40e49e13866bc420d1e7f559cd7b1f5b8065347e3312da3f8c3dede0bb81b07cca46b98486343815b22df78731b4236ebce75b6a9b5ad49d2b4615b3e8f81e477160f0d4ed45c4e49826369207da9a67b1707679b90e42f06cd37c0ed46bfaa94294c002b4bab50f130dce5663e42a396c18e4829df86b9d090de86afa06085c434e423d1ec864601da061b11507079f0d05fa4b78a3df8cb754575be6131f69149714eee1484b254c3a68aa90d05c61905773714f622f6b727c3589ebdf19f93e11edfcdf530b9aaadf87dff5076860896a0d58e3fed18a15f9af23aadd0032aa1447a3c000ba0f014673db8181ad55c063b9a163e4991264dc9086d3a5893ead6199359ae8711cc0d901b09bee67c9a51f64adf799014b063309a3d902b80a5c8db7a9e7610d8e4ba2faac37c8d5c5af4b8b91ed3ca74125d81e203906ba493391e315e84eebc4c6400b8528b614acc1f8aed0105d7be2d6c8a2c2bc1984dea24513025b787f93218371c9f5ed5456ecb9929fc3589bbfb2e243801028ce8f33515a73be468e59cce51ecbee18dcd245141b0298e58f780b55899aabe84fa0fb4cda79821042bc48a3b4e1e5b5b3c29aa3c0d66991fd5d8c655c2256a497a47d27cc401d9572b686f5e001b8beb881b18eebef7f11ce28bb2cf01b21f81c0a3c2b31f110a52c89867e67e950b7587a601dfb60eaa9835d1d6591233b6cffa7d8aed9d8e3ceb614331e2d70ced5e4ee56a22f189634dcc4386b29d34640174e8fdd67028382e563abdc3b608caedb893b4e28b59dac016f5d7a072def9adf906673eb37f89e0e4af558a3a083f7a46e19db5906d084c96555934044ede1356591601c353be47e5dcadc22704ddb750543e6b3462525a7fbc11f742d5bb65a1e9d964e18c3fb6e4dddaa69754433878b668ebbf5de92d3a99fe2a907c3fc605e3335e8f8586dda279e41f781753640012161c69387d510bf9fb4a2894dd06ef6676aa685811e91005b4acbb00680ddf3bd51ba6a4879228bc46f60ea07b11afbcff3bc0ab7d371ebd92cee1522298719003676baa4e021e3ddedda5dfc70206d1184fceca925dedf877610220387de900f4c20294b032a288078a8195fe8df12f0449f0e7b91cf7793b03b1edabea090b88d365af1551cfb5d5affd63d8ce1759d72f1f8b657ab02b5c14598bf9ce0a00420154f1c91b0731795ef87561d3641dfb310f3ef51a18a3e5753dc3345aada74f60e03ce3d3f8480d4700b72f5e5c192fb80aaa722b3f39ecbcbbbe6218c096a19383b557b4c8425fbdaa27c0e8ccb2d5994a444ca5799e9ab77c1cdd8a93246e2160955d440a0e04104b3ab0a04f2563474220bf7684233018ea866a2275bbffa0a79ee1cce53e2aecadbd8d500114517d568b0c6c2ef60e33b4ef2e493501feb0654e0375b8d4152b789fd61da7265eab008dae7ac7a8782cfb003b032bb10e25b667e96835b44e3a876d6ab2c4bb7cb9c4dcecdc9a11e707a50d8086a80a1ec340e1049ca8a9493db6d16f6b8eccbfa8e47002deea379c534509d8607419398d3dca249b4c87846f47105af44c95eedf8f90dc2a5f3814506ae6d3b0b9ce40edbb728bc15d9f5683a9a1c4a943ab7ebf89196a390db50cc34fcaa4e7f110fcba12e46a892016da5f9bb46c5c1e27d455120d953b641ecc99c5eaa207ca6a6765075390e2fbd2d29f065b2f34e4a92531741fdd4221b8d12b1528f100f48d9197a9957a3e33961b72eda5ec0c0c4f20e12de654c6aac0e5c140f1f60607690011da40b846062d209eaff4b6332d69608d35eb2ba6ef9cf48e43cb04d72fbe43c7e37ddeb973c2f3a1c1d9072b69a25c767ec751fa6de960093af07b4aee99d6235d4b6e1498e107f5a8211e2f43a846de6ebe1922593a772a8fd869e1fb91332b523373201cc81441330c0bdf318c690757d0271194c4e987907f8d43f44158f17440c37fb266c395e56973c4e0bd1731d4748f823a99a20771548cceb5cc7fe36f9f6a3aefe2650a272899bc41c8401b45785f1bb47d2a33ea9483775c61282946db289c6ddd7cc50e27bd0625c69c77a4fc6ea985e14810623bb6dddc340a066d58f3d58b2fffd1e244864e1a23459b411cc0b9781f52d63150bdaca2aee2a396849b1d080a7d8fe900d9c3b8dc034b5527e532e5a0e49dba8d7f49589b8ac123933036b5f3ad3fc8f36c53fc920585e7a2f362dda3dbdd272bfb7ce6684203146094373897d60dc6c8407c5f40162dae69b89d0ba615bce5d66b54314158ab2d7234d1f76e66efca66f610075a3c33b801ae3ac995f510426e1037913fb21f6f41385cc5e2fe71f5fa3251ff71fa1ccd601c5e909a6e69a366ef1ccefe815813d911382c84d659d9e0bf1a9a75756453717d54718b36aa1300880dd67a567de56a13aba238ed72434589cf0c4b40b7ba230688d5822ee7abe1d777d465b357ea30bdcb48db64f1b227e4f9895af4931fd892008b97f34e9c872c785f16de5880aca5e0d0537fed8a9daddcd37603f5b02cc0003cd5a342798b07a32d20420a9fe609e105b83feaf8e9c263f27eccfee100d551ee861fc268baf460e18d29af1a61e126f8f816c882143708cb064a6fea69263ff71e5917febdce48e55f51f16d66b0beca2c44c4b19b0a98bd91cf8e975818236eebfcaabbce3d25ce4b211fb097bb21fcbc36b6ea499979d9edb530e7c13ba54626eb3961704420ebd69457683b75b53f9890178bc19533c414ddf0162cfc6a72a3ae653142c1bbaccda1c897c692991c86cd69b71fe0b9993f81ad4d0c7ba76f8cc07df2d1887d10643cb5f77da2b8ef991814501fa6b735eb9788cc79b3f864ebe3d5463ef69ac6083e63328a1381e3f1a21a7735446d409f3224d0dfc7595efb8669820d140a3dfca04ad0d9c92edeb89ab16937912c69ca97e6070d908fc24dc8a225aec69e97fc843957d4d66180ed580107ef080e8427296bcbda1b5a464bcf47193fc1dab6aea9e0f486872f4974ad4218d8808724e8aba7185399955fafc9ff5231e462334853f221c78fcd161b2bc59d27223ab7d4d008c2a4f998c5d79a5ee2e6c680e21cf1ca907cf8743d1c33b201a2eca360010442c020d8815c545575eef615c7741cc00a624afef3d9d99379cc2853c915e90159c946015c2f12970fd8c85771"]}, @generic="69418a6efdb577242388ee0b81091614db33535e02bb7a403b74b6b643aa61ddb1df7c3b44bcb6065990103b6c92d5afde840d199cb61a00431ae8961d188ee38b6a924b6dcaaf0bdd21557eb35a6dd6619eb00d9f469341af66921d218117c5d8d86b263f7aca0aa84ff98b90a312e9d561f9733cf58934676825637fa91871bbecadc638", @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @typed={0x92, 0x8d, 0x0, 0x0, @binary="22349e4d9f9ac2e81595d7e0ff4734f3f6187d5435de9380918803c8e183eb6aa4cbf291dba01c731aee91872c8bdc33b7bbef929734326fd0ead103b2f371a971dfa3ada1190611f88ed35844aa57637b6d6cdfd5834f470a4d22143709b1f08567fd1965c882597242305faf7c46b22a2bb06875a75f25bb450e5f8262e9448bca1bcce3758d7c1073ff8993a6"}]}, 0x1200}, 0x1, 0x0, 0x0, 0x4040000}, 0xc014) 16:53:29 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:29 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:29 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x74000000}, 0x0) 16:53:29 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa1ffffff}, 0x0) 16:53:29 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 32) 16:53:29 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2479.368604] audit: type=1107 audit(1774544009.723:672): pid=18647 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:29 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffff}, 0x0) [ 2479.391445] audit: type=1107 audit(1774544009.747:673): pid=18664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x3}, 0x8) r4 = signalfd(r0, &(0x7f0000000000)={[0x400]}, 0x8) syz_io_uring_setup(0x2861, &(0x7f0000000040)={0x0, 0xbccf, 0x4, 0x0, 0xdb, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 2479.410971] Module has invalid ELF structures [ 2479.421883] Module has invalid ELF structures 16:53:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfeffffff}, 0x0) 16:53:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 33) 16:53:46 executing program 4: r0 = syz_io_uring_setup(0x63be, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xc6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2496.398212] audit: type=1107 audit(1774544026.754:674): pid=18679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x87e2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fork() tkill(r1, 0x3) r2 = fork() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0xf7, 0x5, 0x2, 0x0, 0x18, 0x14008, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8908, 0x3, 0x9, 0x3, 0x2, 0x80000001, 0x85, 0x0, 0x4, 0x0, 0x10000}, r2, 0xb, r0, 0x0) waitid(0x0, r2, &(0x7f00000000c0), 0x4, 0x0) 16:53:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 16:53:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a000000}, 0x0) [ 2496.424125] audit: type=1107 audit(1774544026.780:675): pid=18687 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2496.445734] FAULT_INJECTION: forcing a failure. [ 2496.445734] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.447432] CPU: 1 PID: 18694 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2496.448409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.449578] Call Trace: [ 2496.449961] dump_stack+0x107/0x167 [ 2496.450486] should_fail.cold+0x5/0xa [ 2496.451030] ? io_wq_create+0xeb/0xc00 [ 2496.451630] should_failslab+0x5/0x20 [ 2496.452207] __kmalloc+0x72/0x390 [ 2496.452706] io_wq_create+0xeb/0xc00 [ 2496.453242] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2496.453948] ? io_import_iovec+0x1120/0x1120 [ 2496.454570] ? io_apoll_task_func+0x2d0/0x2d0 [ 2496.455190] ? __io_req_find_next+0x300/0x300 [ 2496.455813] ? do_raw_spin_lock+0x121/0x260 [ 2496.456415] ? rwlock_bug.part.0+0x90/0x90 [ 2496.457007] __io_uring_add_tctx_node+0x2c6/0x520 [ 2496.457676] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2496.458408] ? alloc_fd+0x2e7/0x670 [ 2496.458923] io_uring_setup+0x1fbb/0x2980 [ 2496.459506] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2496.460208] ? wait_for_completion_io+0x270/0x270 [ 2496.460897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2496.461628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2496.462358] do_syscall_64+0x33/0x40 [ 2496.462876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2496.463592] RIP: 0033:0x7f7213914b19 [ 2496.464113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.466735] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2496.467799] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2496.468791] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2496.469784] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2496.470782] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2496.471768] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2496.483308] Module has invalid ELF structures 16:53:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9effffff}, 0x0) 16:53:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffff000}, 0x0) 16:53:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1346, &(0x7f0000000040)={0x0, 0x9964, 0x10, 0x1, 0x46}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r5, r4, &(0x7f0000000500)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x100, 0x800, 0x1}, 0x3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16}, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:53:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) [ 2496.567563] audit: type=1107 audit(1774544026.923:676): pid=18701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:53:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2496.588001] audit: type=1107 audit(1774544026.944:677): pid=18702 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:53:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 16:53:46 executing program 4: r0 = syz_io_uring_setup(0x3c8b, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xbd13, 0x2, 0x0, 0x1af, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x121, 0x1, {0x1, r6}}, 0x2) 16:53:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 34) 16:53:47 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9f000000}, 0x0) 16:53:47 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff7f}, 0x0) 16:53:47 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2496.683356] Module has invalid ELF structures [ 2496.689606] FAULT_INJECTION: forcing a failure. [ 2496.689606] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.692186] CPU: 0 PID: 18725 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2496.693700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.695514] Call Trace: [ 2496.696093] dump_stack+0x107/0x167 [ 2496.696898] should_fail.cold+0x5/0xa [ 2496.697735] ? create_object.isra.0+0x3a/0xa30 [ 2496.698748] should_failslab+0x5/0x20 [ 2496.699571] kmem_cache_alloc+0x5b/0x310 [ 2496.700429] create_object.isra.0+0x3a/0xa30 [ 2496.701371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2496.702486] __kmalloc+0x16e/0x390 [ 2496.703272] io_wq_create+0xeb/0xc00 [ 2496.704093] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2496.705199] ? io_import_iovec+0x1120/0x1120 [ 2496.706157] ? io_apoll_task_func+0x2d0/0x2d0 [ 2496.707142] ? __io_req_find_next+0x300/0x300 [ 2496.708173] ? do_raw_spin_lock+0x121/0x260 [ 2496.709224] ? rwlock_bug.part.0+0x90/0x90 [ 2496.710289] __io_uring_add_tctx_node+0x2c6/0x520 [ 2496.711472] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2496.712748] ? alloc_fd+0x2e7/0x670 [ 2496.713660] io_uring_setup+0x1fbb/0x2980 [ 2496.714697] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2496.715935] ? wait_for_completion_io+0x270/0x270 [ 2496.717144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2496.718445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2496.719707] do_syscall_64+0x33/0x40 [ 2496.720620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2496.721875] RIP: 0033:0x7f7213914b19 [ 2496.722795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.727261] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2496.729106] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2496.730839] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2496.732568] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2496.734308] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2496.736035] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2496.738576] audit: type=1107 audit(1774544027.085:678): pid=18728 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2496.743817] audit: type=1107 audit(1774544027.091:679): pid=18730 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 16:54:06 executing program 6: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x8}) pwrite64(r1, &(0x7f0000000080)="ae", 0x1, 0x40) fallocate(r0, 0x3, 0x0, 0x8000) 16:54:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:06 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff9e}, 0x0) 16:54:06 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:06 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa1ffffff}, 0x0) 16:54:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x803, 0x0) tee(r0, r1, 0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) syz_io_uring_setup(0x681c, &(0x7f0000000040)={0x0, 0x7875, 0x8, 0x3, 0x224, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 16:54:06 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 35) [ 2515.712627] audit: type=1107 audit(1774544046.069:680): pid=18849 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2515.729320] FAULT_INJECTION: forcing a failure. [ 2515.729320] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.731709] CPU: 0 PID: 18854 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2515.733162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2515.734928] Call Trace: [ 2515.735503] dump_stack+0x107/0x167 [ 2515.736266] should_fail.cold+0x5/0xa [ 2515.737060] ? io_wq_create+0x6ef/0xc00 [ 2515.737900] should_failslab+0x5/0x20 [ 2515.738727] kmem_cache_alloc_node_trace+0x59/0x340 [ 2515.739782] io_wq_create+0x6ef/0xc00 [ 2515.740587] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2515.741654] ? io_import_iovec+0x1120/0x1120 [ 2515.742601] ? io_apoll_task_func+0x2d0/0x2d0 [ 2515.743525] ? __io_req_find_next+0x300/0x300 [ 2515.744447] ? do_raw_spin_lock+0x121/0x260 [ 2515.745335] ? rwlock_bug.part.0+0x90/0x90 [ 2515.746242] __io_uring_add_tctx_node+0x2c6/0x520 [ 2515.747341] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2515.748482] ? alloc_fd+0x2e7/0x670 [ 2515.749277] io_uring_setup+0x1fbb/0x2980 [ 2515.750352] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2515.751552] ? wait_for_completion_io+0x270/0x270 [ 2515.752613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2515.753798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2515.754931] do_syscall_64+0x33/0x40 [ 2515.755737] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2515.756863] RIP: 0033:0x7f7213914b19 [ 2515.757668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.761573] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2515.763189] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2515.764728] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2515.766557] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2515.768380] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2515.770210] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2515.772931] audit: type=1107 audit(1774544046.089:681): pid=18845 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:06 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 16:54:06 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffffa1}, 0x0) 16:54:06 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2515.894869] audit: type=1107 audit(1774544046.252:682): pid=18964 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2515.904943] audit: type=1107 audit(1774544046.262:683): pid=18965 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:06 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0x3, 0x1, 0x7, 0x0, 0x6, 0x14, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x91, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x200, 0x34f, 0xa1, 0x1, 0x5, 0x3, 0xd1, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xd, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f8a88b9844b207d03e5fcf5c75728b69bb96abf4e8f2a117ba43c4b9aeea500343caf4735edea854ae94ac2d03f4"]) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 16:54:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 16:54:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:06 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfeffffff}, 0x0) 16:54:06 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 36) [ 2515.997193] loop6: detected capacity change from 0 to 16776704 [ 2516.015446] EXT4-fs (loop6): Unrecognized mount option "ø¨‹˜D²Ð>_Ï\ur‹i»–«ôèò¡ºCĹ®êPCÊôs^Þ¨T®”¬-ô" or missing value [ 2516.041908] audit: type=1107 audit(1774544046.398:684): pid=18978 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2516.047804] FAULT_INJECTION: forcing a failure. [ 2516.047804] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.050073] Module has invalid ELF structures [ 2516.050539] CPU: 0 PID: 18983 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2516.052502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.054194] Call Trace: [ 2516.054767] dump_stack+0x107/0x167 [ 2516.055520] should_fail.cold+0x5/0xa [ 2516.056313] ? create_object.isra.0+0x3a/0xa30 [ 2516.057247] should_failslab+0x5/0x20 [ 2516.058046] kmem_cache_alloc+0x5b/0x310 [ 2516.058908] ? io_wq_create+0x114/0xc00 [ 2516.059750] create_object.isra.0+0x3a/0xa30 [ 2516.060659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2516.061696] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2516.062784] io_wq_create+0x6ef/0xc00 [ 2516.063599] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2516.064665] ? io_import_iovec+0x1120/0x1120 [ 2516.065590] ? io_apoll_task_func+0x2d0/0x2d0 [ 2516.066535] ? __io_req_find_next+0x300/0x300 [ 2516.067470] ? do_raw_spin_lock+0x121/0x260 [ 2516.068351] ? rwlock_bug.part.0+0x90/0x90 [ 2516.069219] __io_uring_add_tctx_node+0x2c6/0x520 [ 2516.070209] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2516.071292] ? alloc_fd+0x2e7/0x670 [ 2516.072084] io_uring_setup+0x1fbb/0x2980 [ 2516.072950] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2516.074004] ? wait_for_completion_io+0x270/0x270 [ 2516.075062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.076210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.077345] do_syscall_64+0x33/0x40 [ 2516.078139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2516.079248] RIP: 0033:0x7f7213914b19 [ 2516.080046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.083913] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2516.085514] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2516.087036] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2516.088553] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2516.090063] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2516.091576] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2516.104444] loop6: detected capacity change from 0 to 16776704 [ 2516.109706] EXT4-fs (loop6): Unrecognized mount option "ø¨‹˜D²Ð>_Ï\ur‹i»–«ôèò¡ºCĹ®êPCÊôs^Þ¨T®”¬-ô" or missing value 16:54:20 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 37) 16:54:20 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:20 executing program 6: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="447e67e5a62ebb40ea3b713fe600548b30882a737814a346a97c1b775c0c5096e35ccac307675322d5da325eb28e7b8c310cb6924f9bc37a0e1992fcb2"]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r3, 0xffffffffffffffff) mincore(&(0x7f0000a0a000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/217) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400, 0x4001, 0x775f1c7054a2719d, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 16:54:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffff0}, 0x0) 16:54:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffff000}, 0x0) [ 2530.415516] audit: type=1107 audit(1774544060.772:685): pid=18996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2530.424589] audit: type=1107 audit(1774544060.777:686): pid=18999 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 16:54:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, r1, 0x302, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x10001}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000840}, 0x4880) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) syz_io_uring_setup(0x7d9a, &(0x7f0000000000)={0x0, 0xdce2, 0x20, 0x2, 0xc8, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16:54:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffffe}, 0x0) [ 2530.448921] FAULT_INJECTION: forcing a failure. [ 2530.448921] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.450721] CPU: 1 PID: 19009 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2530.451730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.452964] Call Trace: [ 2530.453363] dump_stack+0x107/0x167 [ 2530.453905] should_fail.cold+0x5/0xa [ 2530.454464] ? create_object.isra.0+0x3a/0xa30 [ 2530.455137] should_failslab+0x5/0x20 [ 2530.455696] kmem_cache_alloc+0x5b/0x310 [ 2530.456285] ? io_wq_create+0x114/0xc00 [ 2530.456869] create_object.isra.0+0x3a/0xa30 [ 2530.457506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.458273] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2530.459051] io_wq_create+0x6ef/0xc00 [ 2530.459652] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2530.460410] ? io_import_iovec+0x1120/0x1120 [ 2530.461062] ? io_apoll_task_func+0x2d0/0x2d0 [ 2530.461708] ? __io_req_find_next+0x300/0x300 [ 2530.462374] ? do_raw_spin_lock+0x121/0x260 [ 2530.463036] ? rwlock_bug.part.0+0x90/0x90 [ 2530.463673] __io_uring_add_tctx_node+0x2c6/0x520 [ 2530.464379] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2530.465147] ? alloc_fd+0x2e7/0x670 [ 2530.465705] io_uring_setup+0x1fbb/0x2980 [ 2530.466296] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2530.467044] ? wait_for_completion_io+0x270/0x270 [ 2530.467780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.468546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.469301] do_syscall_64+0x33/0x40 [ 2530.469840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.470588] RIP: 0033:0x7f7213914b19 [ 2530.471135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.473812] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2530.474971] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2530.476001] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2530.477000] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2530.478029] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2530.479066] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:54:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff7f}, 0x0) [ 2530.505322] Module has invalid ELF structures [ 2530.519213] audit: type=1107 audit(1774544060.876:687): pid=19013 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2530.532104] audit: type=1107 audit(1774544060.889:688): pid=19015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff9e}, 0x0) 16:54:20 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x18200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1d87) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000002c0)={{r3}, r4, 0xc, @unused=[0x8, 0x3, 0x8001, 0xffffffff], @name="0d04ed6a04a343c9b37b154fd6c5809dbe6433e6c34420957fd3216655f34796819c821eae2ef90f7d3ce3335a54d21af6c25ae49c0246bb5a4a98474b70469094061d23023d45f16504a2aa21c6d6996dfd2917e797e6749678f0cc5199ac6d6672a4818eff6591c6f430a55d815698da212a73114f9a70427aa75a20ec0f22c69221f57f5c310ba3130f7d50d52848646f463029aa004d86ab6b45e6071d198aeedfd1741fdb2aa895831a1305214ee16f266d9c4970a749a9cd956c064128796a837f8351ce75eec679ae269e02958fcea33c5f5ada5b533741b351f9ff1fac0be12c86d327ca59c4eaa655be4002b27f70cb32b8c5fdeb7d48d2f58ce6400c4c17d1d801a798d398208fda341aa05849c3b6c3dfa4369275351aec040f2d46a2cdc14f6ab4c9d3c4676cd65fba8390bced964de699ef453a9a72f877e311c5302f08d4eb06389a5937fefdae076a168e29e5b3a4416ecf5875396c363a32fc554da045889768bc95eba8760003f0a65ffbc06a897a3bdcb4c350ba42d310cad23c38e3aeaceda5d8944fd9dc68fe17c471e6702484b4065df0099fd23076540ce4d6f58c5a38c0e47f2405b9b7ccf1422e9fafd2ee2c4f9755e15f8209d1e929cc335789c2ba1b63b2d545f2aea49834ba5020432b439aa046d30aa4066726e8b27824bc2539c670796182ff04aa7f64a5baf958905c2aa117620352936d3e21fbf6b3ed40d1d29532b196c987016ab7d62e1b1bec23349556b769d91eea939314f76ded51b36cc03cc345693f66479abf4c562d5f288c81a9f3b7d85c57f58546cb498b36e510e743797ea4ded3cff60666ff02b4ed629c04aac27aee146e04f92e88f66df5e9e4a74bffecd4f9972f3c10e5651d173bdefc409cbd97858d297ea9ef6398f877bfe81da58d5dcad325b6d83a296907373e1fe0c0206cfc0534e87324b516eab8a80811d0756b9d737d24cb6ddb01f0b1b0b1d0beb2261e3f96c3bd9e1564b4217f3cb263b51be3f2149cde82f2f90434c2bdd3c155147437b92a39ac514ecf56aa1d97a933ed6bd76c19dc22240aace431b65f68a0188f995f351ad9d48339f2adbc2a6725a175dc648e983f23958a7a9f2a9eb7d7f2016cee37597fe991dbe9ad447d566b6eadb837cf73524748a4ebad738dbc4488ec7228c745207df7b8ed7628ffb1f8da0ed7655178840e88216358b9390665e4ea1fe7c7df68a79a8785822cdededd1a465e31babc0d2d2c006b1eff94500e1a1a9c64f08c7b992ef0dba34ad2a0564128417abfcc8f8953dd331232e194889f22fa032d8ac4406204606f3c1c8ec88a838a2f199b186623e5422ee274480ba867f3c01d6a530543be869c5927d0c2a3cd7e3a572d4619504068e4d0f7f537c6e5b62f4c808c2fdf9fdcc91296b029542c39a8a09b5e3106552c46b4bd69d9aa4177bb420f697c5dca906356bc18206d0ad1c8ffe4ecc700d3d0478f1bad70f78a9ea897e62201deb0ed2d747091667c8a36273e579dab2d2c7b30814f225dd295966baff43077810f15640ff68cc1ef085017e3c09eb0da215a04d92b5145651830d35c0466c4df5ab7950a50028d674fa1f515e3fa54cbce1ddc3a95b8fcc7aed9732928a95ee099c1a7e145fe907561b55bb146b9dbc2bb72849602aafdae36ad88460857c56f63c5768bb185735b6e1800692c8d782ec5a06419ff967cddf888835da292865b0dc9ea7ae1611c043f972fd103cf711c7f9c82ddf6e4674730f6fde44691de11c800510275855301990b6c0787aaf63617ddfca9d2b61d265a60221cc550741cbffe34588433d5761ebe9c86b0ea6a6d0f7b4134146e3f3faca095859dfa507b21520dfaf2d1c954e99e3b8619d81b061273aa0035c6a5dab3446061eba9ec7a83d799c72a830fc8aa02b047d1193a236540ccc37796a55089688631bc9422eacdcf162f4051f2bb417cbf6c9b28fb4e59f9e234c127f48ed33dd84f94cc8c2fb47c6159910026aa80e5a9e77c70f203cc4634349e89867ce7897ca1d1c4b194af319a8448fa850b859cfe01ca17e0e7d2bc7fb091166a5d7b56e0e0d1d427ffb348cc43f8dcb1c33b2a42406bd0bf87c62bc97ecaf07b37a0a488bc4c9dfe62f723e7557d4c269088abb6ca73d0e4bc44da323297fe2475fb9c38f7ccc80dfb96861a18379a41a0b1897abd352b745a5fede0a9a18fdb3d6adedc06dab52e28f3abd56805d6110cbde7f8c3cbb74a91e4062305ef2a98af0a18ebbb1349b8bbe3db8541b05f1bd2145ce5fbbf1daf41a7ca8b5631032d513f6545bfb14e7705b4c99788dc9803b02251676b1e8494f5bb145e32ddb1487d5ae914a68e9d06ac3c866d52c527a47fc5fa7c2fec40f9b8abe5feb07ceed3bc41ec949e17f3f1011830552ac15f798fcdff6d3c40829fd3eeb40ac6d58d5f9e3c58f803678ef63a9e68c6cfb21f7dbaff706bc3da269ff61c8f8362fbf4a45f9caf546aeacab158486d0d0e7c5b66dcecfc56ce75275fb9d47cbae9007afb5c3d10f1be22393f4782bb66e4b80a5a928efc06658544f6d29bfba019afb3773a2835e71d50bb8681234968c10abd931ad49aafe0d64bd1adc47689cb4d6d1d4202bbcb3f54aac813913508988a422b32ba772072660a7fcf98df8558f8cd8575333679aa4c34396e3fdb220f89067a4b10dcecf5aa1bbb8680f5fdabf71bd8b051b8d705656f00b648c80f5104a606311c95702d7eaaa41920e787a3196b0258c3255c67d9d8ba7d8f44ad28348bb67dbef13466b752165642e4f4cdc167b002f8533129d0626c6ca205e34b17c849a01bfcc4942c63dd5034809d88f7a7ae51f8d8c00090675554727ee91462229f25444696d0dadcce7d9f7ca2ab9803d74d66689d279327bc0eeb6e0002e4868680f83c11bcd602211104016bf8fb2368d5e86edcd839ac44a91b683e98f66176b3646b7552ed0f434dadedc733b285f534bf5c56fc7dd4aec9d1accc061874fda6edb8853f0f38670ceec468a097aeb827cff26fec3a73051655b3f7bcf3396e36feadf4aed5c08e985c1f85c39e6444e52aede2c6abd843ae31555e028209279697497ba3bcb000e4bc6bcdff7b9c55104a07518477376587f5a6283802353d17b4a8211b85881a61471a9bde2c61ddf5e204b1e5b42f57ca1fd96dd066c517d3545fbf4fae655827810138c0fd5f46a38a2fa2533232101ad6a1d362af9b26734c7408ac408a20013a712f650236dfe011d9e4adc3cbdee6adf4a7640b1193a54dd3a4deaa33faaac3f634d6904424c3d9f13f794acc3dbf7acad11e1778dd68465432b7fed9a261399ecb3a8c9bc01363b9d6601d9e688bbbbafb438e1861e130152bcb24dc8e82468b96cd8113d03ab7df77a8784e80e9c855a920aaf1414623d557f4313146a011f5cca7706b73976be6cb446a5c42b2e2c4e18f81327f187fdacdb8127c860825ba20ac6f9f4c29516288cf4d84c3921ac5045841a7ce0f876b7ab78ef606fe667afe210687ab704d2e526e4fbef7593d6a2a24e5a7adedd2cef95b0070b5d7c01c8464eb3e75688b2b6524beae1ba1f090533c6703916238fb5d21fdd64c31015e45edceb2f3e999a8dce185fb08b045e79963f1b8b49dd2453f9cffda2220cba2c268cbbb138bf97efc7541179f9cb0a7424b9fd9e53fbf9e856bdd281c71401752c8c5c6cad5400654c31f542e15df22b32e5c2cc1055af989b03ceb1c07085e6693476666c74acd3dbff3e0eb7af0468d7b530893c977c99b4daa9a6084eb344da44313c62ab500ad91a075da6109508ec308e71fd803e139b954ada9ef9fa9f8941477663f75d5d64a8dc04657b5f1c138206d4639e1d7a29708b591b25782659b06face9d02f658b52b930d5cb15e36f25b74beaa1e42dd282fdd575379c22ec889298cd7dab595a433441fe72d1f1f066e12d40db106ce21d4bf92d80dbe90ced8bc14dc6a8a80d458625d41d7299648230bc9a892bbc3616a9f5d4fcbe1c6c6c5ceae96a2842af4cb57a541f93872282ee38e68ebb8ceaada993e219de86840abe57c706f62f1b89eed42f312147a0264eb39164a48b3954d3f5568860f88b6643b0cd2df3ea74d7c1ad2c9fcafc272a5da0bb39aefabe7f2ed8bae70251d1ebf78cb6dbab642e619e759da4fbc52651c207b0d7ee8b8ac6b43d71400d48a1a5fc9fa8292d9415657bd3964aa9aed86ac75589654a1a1fb261c428ce24bbe434cf1a8fd1959801be6899e5a0700a2108c4741f2735aea89e671341e527e06a75ecf0c2990e9864784718f39185b51b0fb09420bb2a86ea721b94d44a24ecc8fa6ba3b26703ad61ca69852ad9e1216d176a7cc9b48e4420ecb5e60c3bcd64b9ccfce7c17d7e429132061f99abaf505ac6e72bb81659bdf2b64802f665e7e9d5d67a44c199350dc8c58f63b2fb2f124cf443d48b56bcc83ef8eea1e4351580148b558d5d3be272a389155ef9b502072796f18d9df181edba7289f3a9d6cbe188e2db96504329764edfe92893b55b371bcf7a4b88b0b40221f0f36599af2a284172be6f6bc14d3abd7009959b637b402e74720cf547c1b8a7d4273c441c2112e35ed133da264916094db129633d370c6124be0bb1fc6b5a62bb5460e898e54a4e6245371f6f321eb8bffc1d23e6ee0410e8e7da70f0ac9a2dbf52d602fe310f066276148b7e089f2fb68671002366387ecfcedf41dfe12d2ded1384aa92f04ad1ccc4544ce92a09a6da2d8bb1222f3c8a6118d789a59b40c58f177b5735de9be8fd6fa4a9636fb40136f83685c857e840c6f3cb1fd206271b14cebcf49ed42bffd8b5819b240eca0dc51eb2cf66de8a024537f01678e828894d8eea5ba7c16e738481eaf7b634213a6fecee034d6dee74671bc2150bc00423f873db32723bdf31da2741427eefdf8c10d51296cae6ca5e90365fd4005c769f8165602dfc6bf6a672354f2ae9323690698143dc0f18583d30ff8c7d7921079538166c00759f18f858a174d76d6099bc0130e215d45e1b9c107a061f0dfabcd57cfd6d5d312f9fba0d889ff39e84b1ffa982f920acad1979ddc80f79d5882841918abf4f34df4a7d3dea4ea0d777e2db867709252aad2153a640d37b7287d2980ded6f70d90289a26751eb70884e0fc90c981b1cdceaf99b9981806fc3ea4a361ccbcc80aab510d2bc6ab632138f67f184a9e986e5b041436a458f4619782fa6c3bb2afe8ccb88570f2cf96d84cb795a9f5d18860af82c255aa049f1517436e77272d343fb2743b4febbdd6b4a0998c9b36c26c6619488d375aeb2a80f372ec87ab2c957bc4afb45a41d838bb682f00fa4e06f152003839d97ffd330acd6ecb92a6d3b2a97f0a13b18c75fdf96ff6fd77e50ba216bacaad862a42a358b6f828abf66ca91400caf8e5a8fd5c75c48a83cdf0288d0c8715e042c0a8de7c5573c9626e5c70551cf80685b019225b2fb916602baedfc8641406f2b399c3b0c21da9e2ff75fa21a74eb9398ed6042bd814092942b11566edd13728a41d2dc2d127bcf2be2ab094debe15c01ae1d0e78531a00bc9ddbefe6d323e0a18bbc961340ad551509548c8720921e07be926870231f09d44f6c4d2db955f96fe6b6af08c58108621aa44e6496e119950f59ad5105856ddfb8f8ab9bd3781ab8b9cbbf617124ad986050c5aa8d8461990749e6a6c934e3d73d8220363"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x5b) sendfile(r1, r5, 0x0, 0x20d315) 16:54:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x8000000000000}, 0x0) 16:54:20 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2530.622436] Module has invalid ELF structures [ 2530.626456] audit: type=1107 audit(1774544060.983:689): pid=19024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2530.635003] audit: type=1107 audit(1774544060.992:690): pid=19026 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:21 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 38) [ 2530.756547] FAULT_INJECTION: forcing a failure. [ 2530.756547] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.758970] CPU: 0 PID: 19036 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2530.760424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2530.762294] Call Trace: [ 2530.762869] dump_stack+0x107/0x167 [ 2530.763642] should_fail.cold+0x5/0xa [ 2530.764450] ? create_object.isra.0+0x3a/0xa30 [ 2530.765392] should_failslab+0x5/0x20 [ 2530.766191] kmem_cache_alloc+0x5b/0x310 [ 2530.767036] create_object.isra.0+0x3a/0xa30 [ 2530.767957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2530.769013] kmem_cache_alloc_trace+0x151/0x320 [ 2530.770029] __io_uring_add_tctx_node+0x15c/0x520 [ 2530.771058] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2530.772165] ? alloc_fd+0x2e7/0x670 [ 2530.772922] io_uring_setup+0x1fbb/0x2980 [ 2530.773791] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2530.774852] ? wait_for_completion_io+0x270/0x270 [ 2530.775890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2530.776988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2530.778063] do_syscall_64+0x33/0x40 [ 2530.778845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2530.779883] RIP: 0033:0x7f7213914b19 [ 2530.780664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2530.784568] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2530.786175] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2530.787670] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2530.789155] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2530.790614] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2530.792089] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:54:35 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffffa1}, 0x0) 16:54:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 16:54:35 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x3f899000) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000cc0)={r3, "f487553a9b44621608242c0fc9f41869"}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000020e819b500"], 0x24}}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[]) r5 = open(&(0x7f0000000000)='./file1\x00', 0xc00, 0x100) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x7, 0x49, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e23, 0x3b, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5a4c2b39}, 0x1c) pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x10) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) fcntl$setown(r4, 0x8, 0x0) 16:54:35 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 39) 16:54:35 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2545.016191] FAULT_INJECTION: forcing a failure. [ 2545.016191] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.017425] audit: type=1107 audit(1774544075.373:691): pid=19046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2545.018911] CPU: 1 PID: 19045 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2545.022703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.024458] Call Trace: [ 2545.025024] dump_stack+0x107/0x167 [ 2545.025797] should_fail.cold+0x5/0xa [ 2545.026606] ? xas_alloc+0x336/0x440 [ 2545.027402] should_failslab+0x5/0x20 [ 2545.028207] kmem_cache_alloc+0x5b/0x310 [ 2545.029071] ? stack_trace_consume_entry+0x160/0x160 [ 2545.030149] xas_alloc+0x336/0x440 [ 2545.030448] audit: type=1107 audit(1774544075.383:692): pid=19043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2545.030910] xas_create+0x34a/0x10d0 [ 2545.034055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2545.035173] xas_store+0x8c/0x1c40 [ 2545.035939] __xa_store+0x164/0x2d0 [ 2545.036713] ? xa_delete_node+0x280/0x280 [ 2545.037602] ? trace_hardirqs_on+0x5b/0x180 [ 2545.038544] xa_store+0x31/0x50 [ 2545.039265] __io_uring_add_tctx_node+0x1cf/0x520 [ 2545.040281] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2545.041392] ? alloc_fd+0x2e7/0x670 [ 2545.042179] io_uring_setup+0x1fbb/0x2980 [ 2545.043083] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2545.044148] ? wait_for_completion_io+0x270/0x270 [ 2545.045214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.046321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.047421] do_syscall_64+0x33/0x40 [ 2545.048208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.049297] RIP: 0033:0x7f7213914b19 [ 2545.050083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.054032] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2545.055651] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2545.057142] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2545.058654] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2545.060159] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2545.061632] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:54:35 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x5, {{0xa, 0x4e21, 0xfffffe01, @local, 0xfff}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x7fffffff, @mcast2, 0x3}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}}, {{0xa, 0x4e20, 0x87bf, @private1, 0x6}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x1f}}, {{0xa, 0x4e22, 0x9a3, @rand_addr=' \x01\x00'}}, {{0xa, 0x4e22, 0xcf, @loopback, 0xf5}}]}, 0x390) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 16:54:35 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2545.082921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 16:54:35 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x100000000000000}, 0x0) 16:54:35 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffff0}, 0x0) [ 2545.138200] Module has invalid ELF structures [ 2545.156271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2545.157846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2545.159708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:54:35 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x72) [ 2545.186785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2545.193021] audit: type=1107 audit(1774544075.550:693): pid=19064 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) [ 2545.206215] audit: type=1107 audit(1774544075.563:694): pid=19067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:35 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:35 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffffe}, 0x0) 16:54:35 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x200000000000000}, 0x0) [ 2545.348789] audit: type=1107 audit(1774544075.706:695): pid=19081 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:35 executing program 6: r0 = socket$inet(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000007080)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="79f5dde5df3c89f3e19f72fd582d985e03a6c22ce9f4c93a6b495050d68b34e29587c997", 0x24}], 0x1}}, {{&(0x7f00000003c0), 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x28}}], 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)=ANY=[@ANYRES16=r2, @ANYBLOB="c501d21a4e4c4f1fb913e42ee17b16a435c8efee244ee4f81b7db52180b87a96b929303120692c540a59a883b618784d99bc88d960c3d8f0466181f3c8dd5ac99e1de2a9c04777397b8aea1bf155cf3086d9ce3a67199da3f0d276accf019dcd3da6bf35700a2b9fd96161b30330083dfae9cdf93d73ef368395bb3ec68fc1e3c5d876a91ce38d02d31fb9f9d7f2b3603f96d43da53a1673e5bb779381abd690112e683ae9eecd315cdbe43abf0d9eda805355f3", @ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=r2, @ANYRESOCT=r2]) [ 2545.354217] Module has invalid ELF structures 16:54:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d9e, 0xdd4e, 0x0, &(0x7f0000000040), 0x8) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_io_uring_setup(0x23c3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x110, r0, 0x10000000) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r7, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r8}}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x4, 0x971, 0x3, 0x10001, 0x2, 0x0, {0x1, r8}}, 0x5c2) [ 2545.385680] audit: type=1107 audit(1774544075.742:696): pid=19086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:49 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x8000000000000}, 0x0) [ 2559.264329] Module has invalid ELF structures 16:54:49 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0xffff, 0x6}, {0xdb, 0x3}], 0xee01}, 0x18, 0x3) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x453, 0x400, 0x70bd2d, 0x25dfdbfd, "b0078e8235a7226cd6108f9bbad615a2e16e9baeeaf760ddc642a2d2fe42e0bd728ba5238e463326100ac00e5390b7d1f9e5", ["", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r4, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 16:54:49 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000080)=""/170, &(0x7f0000000000)=0xaa) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@pptp, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000200)=0xfbd, 0x4) 16:54:49 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x300, 0x0, 0x0) 16:54:49 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:49 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x300000000000000}, 0x0) 16:54:49 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 40) [ 2559.279273] audit: type=1107 audit(1774544089.636:697): pid=19102 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2559.285005] audit: type=1107 audit(1774544089.641:698): pid=19108 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2559.315428] FAULT_INJECTION: forcing a failure. [ 2559.315428] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.317844] CPU: 0 PID: 19117 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2559.319310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.321051] Call Trace: [ 2559.321612] dump_stack+0x107/0x167 [ 2559.322378] should_fail.cold+0x5/0xa [ 2559.323192] ? create_object.isra.0+0x3a/0xa30 [ 2559.324154] should_failslab+0x5/0x20 [ 2559.324954] kmem_cache_alloc+0x5b/0x310 [ 2559.325815] create_object.isra.0+0x3a/0xa30 [ 2559.326735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.327811] kmem_cache_alloc+0x159/0x310 [ 2559.328690] xas_alloc+0x336/0x440 [ 2559.329438] xas_create+0x34a/0x10d0 [ 2559.330238] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2559.331343] xas_store+0x8c/0x1c40 [ 2559.332106] __xa_store+0x164/0x2d0 [ 2559.332875] ? xa_delete_node+0x280/0x280 [ 2559.333751] ? trace_hardirqs_on+0x5b/0x180 [ 2559.334665] xa_store+0x31/0x50 [ 2559.335375] __io_uring_add_tctx_node+0x1cf/0x520 [ 2559.336388] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2559.337483] ? alloc_fd+0x2e7/0x670 [ 2559.338253] io_uring_setup+0x1fbb/0x2980 [ 2559.339139] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2559.340191] ? wait_for_completion_io+0x270/0x270 [ 2559.341237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2559.342336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2559.343431] do_syscall_64+0x33/0x40 [ 2559.344231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2559.345305] RIP: 0033:0x7f7213914b19 [ 2559.346089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.349946] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2559.351550] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2559.353039] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2559.354526] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2559.356029] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2559.357736] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:54:49 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x400000000000000}, 0x0) 16:54:49 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 16:54:49 executing program 6: r0 = msgget$private(0x0, 0x34) msgrcv(r0, &(0x7f0000000000)={0x0, ""/71}, 0x4f, 0x2, 0x3800) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/250) msgrcv(r0, &(0x7f0000000180)={0x0, ""/198}, 0xce, 0x2, 0x2000) msgget$private(0x0, 0x51d) msgctl$IPC_RMID(r0, 0x0) r1 = msgget(0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2000, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000400)={{0x2, 0x0, r2, 0xffffffffffffffff, 0x0, 0x90, 0xd43}, 0x0, 0x0, 0xfffffffffffffff7, 0x7, 0xb6d, 0x9, 0x5, 0x7ff, 0x6, 0x1, r3, 0xffffffffffffffff}) msgrcv(r1, &(0x7f0000000480)={0x0, ""/252}, 0x104, 0x2, 0x0) r4 = msgget(0x0, 0x1) msgsnd(r4, &(0x7f00000005c0)={0x0, "3f9d88a3513c3f684b4f650f3b67877c53724814c46f92a3ef845c20e7ec92ff191a4bec468e4859805118b4e20075996188dc0943cb7ecf1b4a98db89aa36eec010fef855d010a40c4239eed5d0683f741628aaf0f6c8346b23afc7430af91e23a306fc0cd9e8bde979eb1985183fe383d8bc0e9db4d85b844ca80b1fb2625155d21ed34c6fb017bd38d2c47105335ba1db826f"}, 0x9c, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000680)={0x0, 0x989680}, 0x1, 0x1}, 0x7) msgget(0x0, 0x20) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000700)=""/155) r5 = msgget(0x3, 0x400) msgrcv(r5, &(0x7f00000007c0)={0x0, ""/37}, 0x2d, 0x0, 0x0) msgget(0x0, 0x208) 16:54:49 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2559.388753] Module has invalid ELF structures [ 2559.394683] audit: type=1107 audit(1774544089.751:699): pid=19129 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2559.406903] audit: type=1107 audit(1774544089.764:700): pid=19131 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:54:49 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:49 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x100000000000000}, 0x0) 16:54:49 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:54:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) [ 2559.492821] audit: type=1107 audit(1774544089.850:701): pid=19137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2559.498836] Module has invalid ELF structures 16:55:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) [ 2579.017356] audit: type=1107 audit(1774544109.374:702): pid=19151 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2579.020117] Module has invalid ELF structures 16:55:09 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:09 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x500000000000000}, 0x0) 16:55:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x200000000000000}, 0x0) [ 2579.052175] FAULT_INJECTION: forcing a failure. [ 2579.052175] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.053895] CPU: 0 PID: 19166 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2579.054885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2579.056074] Call Trace: [ 2579.056453] dump_stack+0x107/0x167 [ 2579.056971] should_fail.cold+0x5/0xa [ 2579.057519] ? xas_alloc+0x336/0x440 [ 2579.058048] should_failslab+0x5/0x20 [ 2579.058588] kmem_cache_alloc+0x5b/0x310 [ 2579.059179] xas_alloc+0x336/0x440 [ 2579.059687] xas_create+0x34a/0x10d0 [ 2579.060227] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2579.060972] xas_store+0x8c/0x1c40 [ 2579.061487] __xa_store+0x164/0x2d0 [ 2579.062177] ? xa_delete_node+0x280/0x280 [ 2579.062775] ? trace_hardirqs_on+0x5b/0x180 [ 2579.063408] xa_store+0x31/0x50 [ 2579.063879] __io_uring_add_tctx_node+0x1cf/0x520 [ 2579.064561] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2579.065304] ? alloc_fd+0x2e7/0x670 [ 2579.065840] io_uring_setup+0x1fbb/0x2980 [ 2579.066456] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2579.067188] ? wait_for_completion_io+0x270/0x270 [ 2579.067889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2579.068628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2579.069342] do_syscall_64+0x33/0x40 [ 2579.069874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2579.070597] RIP: 0033:0x7f7213914b19 [ 2579.071125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2579.073725] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2579.074823] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2579.075845] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2579.076847] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2579.077832] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2579.078852] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2579.080088] audit: type=1107 audit(1774544109.411:703): pid=19158 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:09 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 41) 16:55:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[], 0xc1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r6, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) execveat(r6, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)=[&(0x7f0000000180)='/$^{)\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000540)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='].$./]\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)=']\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='&\\\x00'], 0x90d0767eb39fca0e) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r5, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x101000, 0x2b4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r4, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x30a, 0x404080, 0x12345, {0x0, r7}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:55:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x0, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:09 executing program 6: write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0, 0x10}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x951, 0x0, 0x0}, 0x0) sendfile(r1, r2, 0x0, 0x100000001) [ 2579.085088] Module has invalid ELF structures [ 2579.087158] Module has invalid ELF structures 16:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2579.134676] Module has invalid ELF structures 16:55:09 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x600000000000000}, 0x0) 16:55:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x300000000000000}, 0x0) [ 2579.198094] audit: type=1107 audit(1774544109.555:704): pid=19176 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:09 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) [ 2579.232188] audit: type=1107 audit(1774544109.589:705): pid=19180 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(0x0, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:09 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 42) 16:55:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x0, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2579.250661] Module has invalid ELF structures 16:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:09 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x400000000000000}, 0x0) [ 2579.293846] FAULT_INJECTION: forcing a failure. [ 2579.293846] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.295434] CPU: 0 PID: 19189 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2579.296325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2579.297345] Call Trace: [ 2579.297692] dump_stack+0x107/0x167 [ 2579.298162] should_fail.cold+0x5/0xa [ 2579.298654] ? xas_alloc+0x336/0x440 [ 2579.299130] should_failslab+0x5/0x20 [ 2579.299631] kmem_cache_alloc+0x5b/0x310 [ 2579.300156] xas_alloc+0x336/0x440 [ 2579.300616] xas_create+0x34a/0x10d0 [ 2579.301124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2579.301815] xas_store+0x8c/0x1c40 [ 2579.302289] __xa_store+0x164/0x2d0 [ 2579.302758] ? xa_delete_node+0x280/0x280 [ 2579.303302] ? trace_hardirqs_on+0x5b/0x180 [ 2579.303862] xa_store+0x31/0x50 [ 2579.304287] __io_uring_add_tctx_node+0x1cf/0x520 [ 2579.304921] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2579.305616] ? alloc_fd+0x2e7/0x670 [ 2579.306104] io_uring_setup+0x1fbb/0x2980 [ 2579.306343] Module has invalid ELF structures [ 2579.306647] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2579.306658] ? wait_for_completion_io+0x270/0x270 [ 2579.306690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2579.309742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2579.310407] do_syscall_64+0x33/0x40 [ 2579.310888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2579.311547] RIP: 0033:0x7f7213914b19 [ 2579.312019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2579.314353] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2579.315327] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2579.316228] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2579.317130] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2579.318033] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2579.318936] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2579.321809] audit: type=1107 audit(1774544109.658:706): pid=19188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:23 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x700000000000000}, 0x0) 16:55:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)=ANY=[], 0xc1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r6, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) execveat(r6, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)=[&(0x7f0000000180)='/$^{)\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000540)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='].$./]\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)=']\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='&\\\x00'], 0x90d0767eb39fca0e) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r5, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x101000, 0x2b4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r4, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x30a, 0x404080, 0x12345, {0x0, r7}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:55:23 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 16:55:23 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 43) 16:55:23 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x0, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2593.369983] FAULT_INJECTION: forcing a failure. [ 2593.369983] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.370799] audit: type=1107 audit(1774544123.728:707): pid=19306 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2593.372708] CPU: 1 PID: 19310 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2593.372723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.377901] Call Trace: [ 2593.378542] dump_stack+0x107/0x167 [ 2593.379429] should_fail.cold+0x5/0xa [ 2593.380347] ? create_object.isra.0+0x3a/0xa30 [ 2593.381443] should_failslab+0x5/0x20 [ 2593.382361] kmem_cache_alloc+0x5b/0x310 [ 2593.383348] ? mark_held_locks+0x9e/0xe0 [ 2593.384330] create_object.isra.0+0x3a/0xa30 [ 2593.385384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2593.386557] audit: type=1107 audit(1774544123.743:708): pid=19311 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2593.386595] kmem_cache_alloc+0x159/0x310 [ 2593.389133] xas_alloc+0x336/0x440 [ 2593.389990] xas_create+0x34a/0x10d0 [ 2593.390896] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2593.392163] xas_store+0x8c/0x1c40 [ 2593.393032] __xa_store+0x164/0x2d0 [ 2593.393912] ? xa_delete_node+0x280/0x280 [ 2593.394912] ? trace_hardirqs_on+0x5b/0x180 [ 2593.395969] xa_store+0x31/0x50 [ 2593.396765] __io_uring_add_tctx_node+0x1cf/0x520 [ 2593.397911] ? io_uring_alloc_task_context+0x6a0/0x6a0 16:55:23 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x500000000000000}, 0x0) 16:55:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x11, r0, 0x10000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r3, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r4}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x0, 0x0, 0x0, {0x0, r4}}, 0xb24a) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x8000000) r7 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/185, 0xb9}], 0x6, &(0x7f0000000900)=""/151, 0x97}, 0x0, 0x61, 0x1, {0x1, r8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) shutdown(r9, 0x0) syz_io_uring_setup(0x3403, &(0x7f0000000000)={0x0, 0x786c, 0x227a3b53c39ca20f, 0x2, 0x17e, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2593.399152] ? alloc_fd+0x2e7/0x670 [ 2593.400247] io_uring_setup+0x1fbb/0x2980 [ 2593.401250] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2593.402454] ? wait_for_completion_io+0x270/0x270 [ 2593.403647] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.404900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2593.406141] do_syscall_64+0x33/0x40 [ 2593.407023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2593.408245] RIP: 0033:0x7f7213914b19 [ 2593.409125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2593.413478] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2593.415278] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2593.416971] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2593.418657] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2593.420350] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 16:55:23 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa00000000000000}, 0x0) [ 2593.422034] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2593.457726] Module has invalid ELF structures [ 2593.474602] audit: type=1107 audit(1774544123.831:709): pid=19319 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:39 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x600000000000000}, 0x0) 16:55:39 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:39 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 44) 16:55:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 16:55:39 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 16:55:39 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:39 executing program 6: keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/35, 0x23) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000540)='{\x00', &(0x7f0000000780)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f00000005c0)={0x20, 0x14, 0xce, "dd92a5544bdb6abd4f9958d5b4dc9a182151ef205266f695a5998de9c229bc0cd638341d5ccf083402fef1b5689c54b80ab5e4de93c8b7ed914257c3b8d3eb8c0e93eb1795e4bb3a12c47c156e5c78cfd5957faa982611d63fd7f50cada34a363677eaa28201914ead690c4bbdc67f1d7653d596d6c87448d0a21d43bd2ea4e732b6aacddc40e2b973c108f3209e2b2baa1eed79c3fb8d9c4f9c0aa1072692ce50231dbf6366ff4394eea804d8c3bfdac65ddd3eba4cd91a09b33aed90205660b37509f28e0456e93f3238374361"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1}}) fallocate(0xffffffffffffffff, 0x60, 0x100000001, 0x5) timer_create(0x3, 0x0, &(0x7f0000000040)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000940)=@ccm_128={{0x304}, "2aec5f0f4915de95", "f3887401e9459ec1f76fa63b9063af13", "f8ac0443", "4798a4ead3e5220a"}, 0x28) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000007c0)=""/250, 0xfa) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:55:39 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000005, 0x30, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r0, 0x0) [ 2609.133391] audit: type=1107 audit(1774544139.490:710): pid=19435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2609.150701] FAULT_INJECTION: forcing a failure. [ 2609.150701] name failslab, interval 1, probability 0, space 0, times 0 [ 2609.152474] CPU: 1 PID: 19440 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2609.153448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2609.154622] Call Trace: [ 2609.155004] dump_stack+0x107/0x167 [ 2609.155534] should_fail.cold+0x5/0xa [ 2609.156081] ? create_object.isra.0+0x3a/0xa30 [ 2609.156733] should_failslab+0x5/0x20 [ 2609.157269] kmem_cache_alloc+0x5b/0x310 [ 2609.157852] ? mark_held_locks+0x9e/0xe0 [ 2609.158441] create_object.isra.0+0x3a/0xa30 [ 2609.159060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2609.159800] kmem_cache_alloc+0x159/0x310 [ 2609.160394] xas_alloc+0x336/0x440 [ 2609.160919] xas_create+0x34a/0x10d0 [ 2609.161451] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2609.162206] xas_store+0x8c/0x1c40 [ 2609.162727] __xa_store+0x164/0x2d0 [ 2609.163241] ? xa_delete_node+0x280/0x280 [ 2609.163851] ? trace_hardirqs_on+0x5b/0x180 [ 2609.164468] xa_store+0x31/0x50 [ 2609.164939] __io_uring_add_tctx_node+0x1cf/0x520 [ 2609.165619] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2609.165684] audit: type=1107 audit(1774544139.520:711): pid=19433 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2609.166366] ? alloc_fd+0x2e7/0x670 [ 2609.166394] io_uring_setup+0x1fbb/0x2980 [ 2609.170209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2609.170925] ? wait_for_completion_io+0x270/0x270 [ 2609.171631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2609.172367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2609.173105] do_syscall_64+0x33/0x40 [ 2609.173638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2609.174369] RIP: 0033:0x7f7213914b19 [ 2609.174905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2609.177473] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2609.178532] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2609.179536] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2609.180535] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2609.181534] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2609.182554] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2609.185995] Module has invalid ELF structures 16:55:39 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x700000000000000}, 0x0) 16:55:39 executing program 6: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5afaab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a787817ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea08c42e9769da47edb4786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f735ac8904bcac9495d765ed80e25303ae35dcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793acaed5d52d0491eccd5cf55919d9d65905cf84cae67ea74d10b1f5ad4f94e332d69f47f51d9c106b54013f514cb39bc6087be16e11f81fb4cefe53c7a40262ee924b067e0ac61894749c7b4e9acd89cac39519b9a2fd99f3f7abb398e6eb9989a71c4823a45f361fdd7bb98863e1960e20dc4603e36b96215eece80b7cbbd89078917d457e996d78fa39dab5800ed72cd9f9f2603b000000000000000000000000000000d3fc210c6e90c51c4e68c339d5587215362f698890a9a138058335ff89a105cfd124feaa97d6886b60bfd9bc04000000000000007dc0633e0bdfa76dd848b012487ffa10243acc126797f78f09e81ca32f617b4967af79055047beb1c6118645509c2d84500d6244b9c6c7540fda4e9298b0"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000000}, 0x80, 0x8, 0x2, 0x0, 0x7, 0x0, 0x87, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x86680, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @aes128, 0x0, @desc4}) socket$inet(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r4 = fcntl$dupfd(r1, 0x406, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x6, 0xa1, 0x8, 0x3f, 0x0, 0xc, 0xa0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8004, 0x2, 0xff, 0x7, 0xffffffff, 0x337, 0x4, 0x0, 0x9f3597d, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r4, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="280026bd70ca826946dfaf5ca6287962bdc5ba09409857df8ca8d9211e0d8347b4ff65bb806b08b7ca0e6e4140156a37d225e825d86975ec85fb6af6ba4355d981000000112f81675387108e5f4156e1f305683505b43056f564caad1e4cb86ee92d3d7fe0c2970a00"/117, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) [ 2609.234758] audit: type=1107 audit(1774544139.591:712): pid=19448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:39 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa00000000000000}, 0x0) [ 2609.277645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 16:55:39 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x2801000000000000}, 0x0) 16:55:39 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2609.321559] audit: type=1107 audit(1774544139.678:713): pid=19474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2609.325005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2609.325948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2609.326950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:55:39 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r9, 0x10000000) syz_io_uring_submit(0x0, r11, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r10}}, 0x1) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000000), 0x1, 0x1, 0x0, {0x0, r10}}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2609.352401] audit: type=1107 audit(1774544139.709:714): pid=19487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2609.360714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2609.372842] Module has invalid ELF structures 16:55:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 16:55:39 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf00000000000000}, 0x0) [ 2609.397745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2609.399030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2609.400152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2609.433588] audit: type=1107 audit(1774544139.790:715): pid=19514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2627.280509] FAULT_INJECTION: forcing a failure. [ 2627.280509] name failslab, interval 1, probability 0, space 0, times 0 [ 2627.282912] CPU: 1 PID: 19578 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2627.284381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2627.286121] Call Trace: [ 2627.286688] dump_stack+0x107/0x167 [ 2627.287461] should_fail.cold+0x5/0xa [ 2627.288275] ? xas_alloc+0x336/0x440 [ 2627.289067] should_failslab+0x5/0x20 [ 2627.289873] kmem_cache_alloc+0x5b/0x310 [ 2627.290738] xas_alloc+0x336/0x440 [ 2627.291492] xas_create+0x34a/0x10d0 [ 2627.292304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2627.293412] xas_store+0x8c/0x1c40 [ 2627.294187] __xa_store+0x164/0x2d0 [ 2627.294964] ? xa_delete_node+0x280/0x280 [ 2627.295910] ? trace_hardirqs_on+0x5b/0x180 [ 2627.296829] xa_store+0x31/0x50 [ 2627.297531] __io_uring_add_tctx_node+0x1cf/0x520 [ 2627.298555] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2627.299657] ? alloc_fd+0x2e7/0x670 [ 2627.300447] io_uring_setup+0x1fbb/0x2980 [ 2627.301336] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2627.302840] ? wait_for_completion_io+0x270/0x270 [ 2627.303905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2627.305007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2627.306101] do_syscall_64+0x33/0x40 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x20010, r0, 0x0) 16:55:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:57 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4800000000000000}, 0x0) 16:55:57 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 45) 16:55:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4800000000000000}, 0x0) 16:55:57 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 16:55:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 16:55:57 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2627.306889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2627.308166] RIP: 0033:0x7f7213914b19 [ 2627.308999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2627.312915] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2627.314533] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2627.316055] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2627.317559] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2627.319062] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2627.320577] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2627.324599] audit: type=1107 audit(1774544157.655:716): pid=19582 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2627.330597] audit: type=1107 audit(1774544157.657:717): pid=19581 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x14, 0x11, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = fork() r2 = mq_open(&(0x7f0000000080)='#--\x00', 0x40, 0xc0, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x6}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc4}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) 16:55:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c00000000000000}, 0x0) [ 2627.352110] audit: type=1107 audit(1774544157.709:718): pid=19590 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2627.355827] Module has invalid ELF structures [ 2627.363210] Module has invalid ELF structures 16:55:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) [ 2627.408273] audit: type=1107 audit(1774544157.765:719): pid=19597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:55:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:57 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:55:57 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x4c00000000000000}, 0x0) 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4d5f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2}}, 0x1) syz_io_uring_submit(r3, r1, &(0x7f0000001500)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x1, 0x0, 0x1000}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x56, 0x5, &(0x7f0000000240)=[{&(0x7f0000000080)="ad0f960ebbf9e720e789e56a85f377637995f77d1265752d4cfe8b78d0cc10c483079f3f6f4d12ff5365b235896ef3bacffa95ebea7e865446f61b4f476027c46d9da771e8c0553dce9a7e395e5d77d51c7e4ceeea4f4d26c69b81576d3d67cdc28d35fa304a48961f724edd3ba2eba983217563223acc3f6cb51ee5360c2fe9704593a0bc19f90747", 0x89, 0x7}, {&(0x7f0000000180)="f1a1631eaf8a229bdaad4079ae052e115057cf79ca7b5107389cbab8b53e80601e6e7803e1", 0x25, 0x7f80000}, {&(0x7f00000001c0)="defd67e0b792faec96bc622f0523228a56fcafd7482533b7159c317acc9678d4fb9bc10c528b1414d638ac1f02653decb8880d6155f44717e3", 0x39, 0xff}, {&(0x7f0000000340)="6f26de362a15c06779fe5b40b6bf9ef33fe0ad42c875acc7f2d6a36102488ff069857771934ee10e8d52eb231c213ec9da83da1d35b851c3df2bc91e242d7a9496b7bf932f32871d7f636bf828adf0246e2098ee1a29c0619fd2bfc7c4a35da147cb27661c0d218d2fc0489a4d52c91d49ffa5e05b38ce7d272e09b81a7065c5b26f58", 0x83, 0x2}, {&(0x7f0000000400)="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", 0x1000, 0x3}], 0x18000, &(0x7f0000001400)={[{'$)$@)'}, {}, {']'}, {}, {',-))'}, {'\x00'}, {}, {',*'}], [{@fsmagic={'fsmagic', 0x3d, 0x400}}]}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/zoneinfo\x00', 0x0, 0x0) r12 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r14 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r12, 0x10000000) syz_io_uring_submit(0x0, r14, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r13}}, 0x1) r15 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001480)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r10, 0x5, {0x0, r11}, 0x5, 0x5, 0x1, {0x0, r13, r15}}, 0x0) [ 2627.468727] Module has invalid ELF structures [ 2627.491770] loop4: detected capacity change from 0 to 135266304 16:55:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6800000000000000}, 0x0) [ 2627.498527] nfs4: Unknown parameter '$)$@)' [ 2627.499532] audit: type=1107 audit(1774544157.856:720): pid=19609 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2627.509906] Module has invalid ELF structures 16:55:57 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 46) 16:55:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2627.564814] FAULT_INJECTION: forcing a failure. [ 2627.564814] name failslab, interval 1, probability 0, space 0, times 0 [ 2627.567243] CPU: 1 PID: 19620 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2627.568680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2627.570367] Call Trace: [ 2627.570928] dump_stack+0x107/0x167 [ 2627.571688] should_fail.cold+0x5/0xa [ 2627.572480] ? create_object.isra.0+0x3a/0xa30 [ 2627.573414] should_failslab+0x5/0x20 [ 2627.574199] kmem_cache_alloc+0x5b/0x310 [ 2627.575040] ? mark_held_locks+0x9e/0xe0 [ 2627.575892] create_object.isra.0+0x3a/0xa30 [ 2627.576786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2627.577848] kmem_cache_alloc+0x159/0x310 [ 2627.578703] xas_alloc+0x336/0x440 [ 2627.579431] xas_create+0x34a/0x10d0 [ 2627.580230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2627.581315] xas_store+0x8c/0x1c40 [ 2627.582068] __xa_store+0x164/0x2d0 [ 2627.582821] ? xa_delete_node+0x280/0x280 [ 2627.583672] ? trace_hardirqs_on+0x5b/0x180 [ 2627.584572] xa_store+0x31/0x50 [ 2627.585250] __io_uring_add_tctx_node+0x1cf/0x520 [ 2627.586245] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2627.587318] ? alloc_fd+0x2e7/0x670 [ 2627.588095] io_uring_setup+0x1fbb/0x2980 [ 2627.588955] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2627.589993] ? wait_for_completion_io+0x270/0x270 [ 2627.591013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2627.592092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2627.593157] do_syscall_64+0x33/0x40 [ 2627.593920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2627.594974] RIP: 0033:0x7f7213914b19 [ 2627.595738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2627.599463] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2627.601108] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2627.602570] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2627.604063] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2627.605556] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2627.606373] loop4: detected capacity change from 0 to 135266304 [ 2627.607070] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2627.607517] audit: type=1107 audit(1774544157.927:721): pid=19621 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2627.608291] nfs4: Unknown parameter '$)$@)' [ 2627.633798] Module has invalid ELF structures 16:56:13 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 47) 16:56:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:13 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6800000000000000}, 0x0) 16:56:13 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2643.158384] FAULT_INJECTION: forcing a failure. [ 2643.158384] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.161155] CPU: 1 PID: 19641 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2643.162837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.164872] Call Trace: [ 2643.165539] dump_stack+0x107/0x167 [ 2643.166440] should_fail.cold+0x5/0xa [ 2643.167376] ? xas_alloc+0x336/0x440 [ 2643.168310] should_failslab+0x5/0x20 [ 2643.169249] kmem_cache_alloc+0x5b/0x310 [ 2643.170242] xas_alloc+0x336/0x440 [ 2643.171142] xas_create+0x34a/0x10d0 [ 2643.172103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2643.173390] xas_store+0x8c/0x1c40 [ 2643.174302] __xa_store+0x164/0x2d0 [ 2643.175196] ? xa_delete_node+0x280/0x280 [ 2643.176238] ? trace_hardirqs_on+0x5b/0x180 [ 2643.177303] xa_store+0x31/0x50 [ 2643.178119] __io_uring_add_tctx_node+0x1cf/0x520 [ 2643.179296] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2643.180578] ? alloc_fd+0x2e7/0x670 [ 2643.181495] io_uring_setup+0x1fbb/0x2980 [ 2643.182519] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2643.183737] ? wait_for_completion_io+0x270/0x270 [ 2643.185183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.185829] Module has invalid ELF structures [ 2643.186522] ? syscall_enter_from_user_mode+0x1d/0x50 16:56:13 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 16:56:13 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(0x0, 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c00000000000000}, 0x0) 16:56:13 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x410, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x39}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r6 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r6, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xfd) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf251500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8000810}, 0x20000000) syz_io_uring_setup(0x80004d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 2643.186553] do_syscall_64+0x33/0x40 [ 2643.186580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.186600] RIP: 0033:0x7f7213914b19 [ 2643.191832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.196323] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2643.198179] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2643.199926] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2643.201664] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 16:56:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2643.203415] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2643.205300] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2643.215637] audit: type=1107 audit(1774544173.572:722): pid=19647 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2643.244299] audit: type=1107 audit(1774544173.601:723): pid=19637 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2643.248854] Module has invalid ELF structures [ 2643.257670] Module has invalid ELF structures [ 2643.259798] Module has invalid ELF structures 16:56:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7400000000000000}, 0x0) 16:56:13 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x6c00000000000000}, 0x0) 16:56:13 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 48) 16:56:13 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:13 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) [ 2643.364335] audit: type=1107 audit(1774544173.721:724): pid=19664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:13 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2643.379144] audit: type=1107 audit(1774544173.736:725): pid=19665 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2643.425989] Module has invalid ELF structures 16:56:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a00000000000000}, 0x0) [ 2643.458759] Module has invalid ELF structures 16:56:13 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7400000000000000}, 0x0) 16:56:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2643.482943] FAULT_INJECTION: forcing a failure. [ 2643.482943] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.485739] CPU: 1 PID: 19681 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2643.487378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.489357] Call Trace: [ 2643.490002] dump_stack+0x107/0x167 [ 2643.490870] should_fail.cold+0x5/0xa [ 2643.491780] ? ___slab_alloc+0x155/0x700 [ 2643.492760] ? create_object.isra.0+0x3a/0xa30 [ 2643.493842] should_failslab+0x5/0x20 [ 2643.494752] kmem_cache_alloc+0x5b/0x310 [ 2643.495728] create_object.isra.0+0x3a/0xa30 [ 2643.496775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2643.497991] kmem_cache_alloc+0x159/0x310 [ 2643.498992] xas_alloc+0x336/0x440 [ 2643.499841] xas_create+0x34a/0x10d0 [ 2643.500766] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2643.502004] xas_store+0x8c/0x1c40 [ 2643.502873] __xa_store+0x164/0x2d0 [ 2643.503746] ? xa_delete_node+0x280/0x280 [ 2643.504757] ? trace_hardirqs_on+0x5b/0x180 [ 2643.505796] xa_store+0x31/0x50 [ 2643.506588] __io_uring_add_tctx_node+0x1cf/0x520 16:56:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x0, 0x6, 0x9, 0x400, 0x9}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x80, 0x140) mmap(&(0x7f00007a2000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000a, 0x2010, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) openat(r4, &(0x7f00000001c0)='./file1\x00', 0x22000, 0x0) shutdown(0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x3, r2, &(0x7f0000000180)=0xbd4, 0xffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) [ 2643.507733] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2643.509192] ? alloc_fd+0x2e7/0x670 [ 2643.510094] io_uring_setup+0x1fbb/0x2980 [ 2643.511103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2643.512312] ? wait_for_completion_io+0x270/0x270 [ 2643.513540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2643.514809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.516094] do_syscall_64+0x33/0x40 [ 2643.517012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.518261] RIP: 0033:0x7f7213914b19 [ 2643.519164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.523623] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2643.525485] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2643.527200] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2643.528947] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2643.530680] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2643.532419] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:56:13 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) [ 2643.540769] audit: type=1107 audit(1774544173.876:726): pid=19683 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:13 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x7a00000000000000}, 0x0) [ 2643.549518] audit: type=1107 audit(1774544173.904:727): pid=19682 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2643.568710] Module has invalid ELF structures [ 2643.571675] audit: type=1107 audit(1774544173.929:728): pid=19692 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:13 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:27 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 49) 16:56:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x100000, 0x0, 0x0) 16:56:27 executing program 6: shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfa}}, './file0\x00'}) io_uring_setup(0x7d1d, &(0x7f0000000000)={0x0, 0x3fffff, 0x2, 0xfff, 0x269, 0x0, r0}) 16:56:27 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 16:56:27 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 16:56:27 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x20, 0x1, 0x1, 0x7, 0x2, 0x3, 0x4, 0x2b3, 0x40, 0x3c9, 0xffffff81, 0x7, 0x38, 0x1, 0xcd, 0x3, 0x1f}, [{0x1, 0x1, 0x2, 0x40, 0xf83d, 0x4, 0x20, 0xff}], "5d562bb20e8d6d284c85910e19002472ced9135ed2e89afcbcc6513033a00f8aea4102bf7894a3b55a7432f181dd14d4c9cef5ae9368ee0cfac626865e07a79e8167bc1b9aca5349115713414e580e38105b6222f704f96b37f506eb889cbc9e6585f2934c68e32bb219c2d673c1c2a36055c475868b5f1c3c587f4bc39e2a09263fa15a3b287b1774", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb01) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff33ac, 0x1}}, './file0\x00'}) r2 = dup(r1) r3 = syz_io_uring_setup(0xf5e, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) [ 2656.895035] audit: type=1107 audit(1774544187.252:729): pid=19709 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2656.899259] audit: type=1107 audit(1774544187.256:730): pid=19708 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2656.906204] FAULT_INJECTION: forcing a failure. [ 2656.906204] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.908793] CPU: 1 PID: 19717 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2656.910374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.912297] Call Trace: [ 2656.912903] dump_stack+0x107/0x167 [ 2656.913737] should_fail.cold+0x5/0xa [ 2656.914606] ? xas_alloc+0x336/0x440 [ 2656.915453] should_failslab+0x5/0x20 [ 2656.916327] kmem_cache_alloc+0x5b/0x310 [ 2656.917259] xas_alloc+0x336/0x440 [ 2656.918075] xas_create+0x34a/0x10d0 [ 2656.918933] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2656.920067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2656.921262] xas_store+0x8c/0x1c40 [ 2656.922093] __xa_store+0x164/0x2d0 [ 2656.922926] ? xa_delete_node+0x280/0x280 [ 2656.923884] ? trace_hardirqs_on+0x5b/0x180 [ 2656.924890] xa_store+0x31/0x50 [ 2656.925647] __io_uring_add_tctx_node+0x1cf/0x520 [ 2656.926741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2656.927933] ? alloc_fd+0x2e7/0x670 [ 2656.928794] io_uring_setup+0x1fbb/0x2980 [ 2656.929753] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2656.930904] ? wait_for_completion_io+0x270/0x270 [ 2656.932043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2656.933234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2656.934411] do_syscall_64+0x33/0x40 [ 2656.935257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2656.936436] RIP: 0033:0x7f7213914b19 [ 2656.937280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.941483] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2656.943225] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2656.944853] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2656.946478] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2656.948107] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2656.949738] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2657.015756] Module has invalid ELF structures 16:56:27 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:27 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:27 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x7}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x3f899000) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000020e81db500"], 0x24}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="01100008947a100000"]) socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r3 = pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r3, 0x40, 0x9, 0x7ff8000000000}) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000340)={r5, r6, 0x7}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) 16:56:27 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 50) [ 2657.032124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2657.063148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2657.064978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2657.066758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:56:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 16:56:27 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x9f00000000000000}, 0x0) [ 2657.079314] audit: type=1107 audit(1774544187.436:731): pid=19736 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2657.090717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2657.113197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2657.115364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2657.118217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2657.149651] FAULT_INJECTION: forcing a failure. [ 2657.149651] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.152358] CPU: 1 PID: 19731 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2657.153932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.155794] Call Trace: [ 2657.156405] dump_stack+0x107/0x167 [ 2657.157235] should_fail.cold+0x5/0xa [ 2657.158118] ? create_object.isra.0+0x3a/0xa30 [ 2657.159145] should_failslab+0x5/0x20 [ 2657.160011] kmem_cache_alloc+0x5b/0x310 [ 2657.160947] ? mark_held_locks+0x9e/0xe0 [ 2657.161876] create_object.isra.0+0x3a/0xa30 [ 2657.162871] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.164041] kmem_cache_alloc+0x159/0x310 [ 2657.164984] xas_alloc+0x336/0x440 [ 2657.165802] xas_create+0x34a/0x10d0 [ 2657.166661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.167873] xas_store+0x8c/0x1c40 [ 2657.168717] __xa_store+0x164/0x2d0 [ 2657.169549] ? xa_delete_node+0x280/0x280 [ 2657.170492] ? trace_hardirqs_on+0x5b/0x180 [ 2657.171471] xa_store+0x31/0x50 [ 2657.172228] __io_uring_add_tctx_node+0x1cf/0x520 [ 2657.173324] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2657.174505] ? alloc_fd+0x2e7/0x670 [ 2657.175341] io_uring_setup+0x1fbb/0x2980 [ 2657.176300] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2657.177445] ? wait_for_completion_io+0x270/0x270 [ 2657.178579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.179769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.180955] do_syscall_64+0x33/0x40 [ 2657.181795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.182952] RIP: 0033:0x7f7213914b19 [ 2657.183799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.187961] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2657.189685] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2657.191302] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2657.192913] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2657.194531] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2657.196151] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2672.622722] FAULT_INJECTION: forcing a failure. [ 2672.622722] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.624615] CPU: 1 PID: 19749 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2672.625601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2672.626770] Call Trace: [ 2672.627153] dump_stack+0x107/0x167 [ 2672.627679] should_fail.cold+0x5/0xa [ 2672.628227] ? xas_alloc+0x336/0x440 [ 2672.628761] should_failslab+0x5/0x20 [ 2672.629293] kmem_cache_alloc+0x5b/0x310 [ 2672.629869] xas_alloc+0x336/0x440 [ 2672.630383] xas_create+0x34a/0x10d0 [ 2672.630931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2672.631681] xas_store+0x8c/0x1c40 [ 2672.632210] __xa_store+0x164/0x2d0 [ 2672.632734] ? xa_delete_node+0x280/0x280 [ 2672.633326] ? trace_hardirqs_on+0x5b/0x180 [ 2672.633941] xa_store+0x31/0x50 [ 2672.634421] __io_uring_add_tctx_node+0x1cf/0x520 [ 2672.635102] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2672.635832] ? alloc_fd+0x2e7/0x670 [ 2672.636365] io_uring_setup+0x1fbb/0x2980 [ 2672.636977] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2672.637740] ? wait_for_completion_io+0x270/0x270 [ 2672.638458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2672.639193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2672.639939] do_syscall_64+0x33/0x40 [ 2672.640428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2672.641035] RIP: 0033:0x7f7213914b19 [ 2672.641461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.643632] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2672.644388] Module has invalid ELF structures [ 2672.644556] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2672.644566] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2672.644576] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2672.644585] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2672.644594] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2672.662052] audit: type=1107 audit(1774544203.019:732): pid=19758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:42 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 51) 16:56:42 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa1ffffff00000000}, 0x0) 16:56:42 executing program 6: r0 = msgget(0x1, 0x418) msgsnd(r0, &(0x7f0000000040)={0x0, "543ecc8723179a630bab03b86636730076328f87e0d8e385d98f57b50ff839a201b5d14af7eea629cbe51fd5c9a37e9519d1b6db93249ede19aa5fb22ded46ed40e6912375d1e42a17c0265f2c1df7377fc5b00a289a924bf80ddcef2121367ae643727e0ddd3121ee07bba6c201ee67ca8f6f1614d6c01df0a950bee8948959c94b2472f9122d0c038ef5d72b84c12d22ce6211a7a0aa06ac6d4ae992e15903ebebcbcd657317033a8804fb2ad9c4b575bd267bf3fd29e4280afed6b1c2a87aa622fc76cb"}, 0xcd, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x3, 0x2a) 16:56:42 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000028c0)=[{0x0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x80, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x844, 0x800, 0x0, 0x3, 0x1, 0x4cfba948, 0x5, 0x0, 0x7, 0x0, 0xfff}, 0xffffffffffffffff, 0xe, r0, 0x2) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000100)=0xfdb) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 16:56:42 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:42 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xa1ffffff00000000}, 0x0) 16:56:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0xe0ff7f, 0x0, 0x0) [ 2672.675510] audit: type=1107 audit(1774544203.032:733): pid=19763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2672.677902] Module has invalid ELF structures 16:56:43 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:43 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 16:56:43 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 16:56:43 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) fork() ioctl$TCFLSH(r1, 0x5608, 0x0) [ 2672.740128] audit: type=1107 audit(1774544203.097:734): pid=19771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:43 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:43 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 52) 16:56:43 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) io_uring_enter(r1, 0x233b, 0x4961, 0x2, &(0x7f0000000000)={[0x58]}, 0x8) [ 2672.764652] audit: type=1107 audit(1774544203.122:735): pid=19776 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) [ 2672.769958] Module has invalid ELF structures [ 2672.787875] Module has invalid ELF structures 16:56:43 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfeffffff00000000}, 0x0) 16:56:43 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfeffffff00000000}, 0x0) [ 2672.820882] FAULT_INJECTION: forcing a failure. [ 2672.820882] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.820896] CPU: 0 PID: 19791 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2672.820901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2672.820906] Call Trace: [ 2672.820923] dump_stack+0x107/0x167 [ 2672.820936] should_fail.cold+0x5/0xa [ 2672.820949] ? create_object.isra.0+0x3a/0xa30 [ 2672.820962] audit: type=1107 audit(1774544203.177:736): pid=19790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2672.820972] should_failslab+0x5/0x20 [ 2672.820983] kmem_cache_alloc+0x5b/0x310 [ 2672.820996] ? mark_held_locks+0x9e/0xe0 [ 2672.821010] create_object.isra.0+0x3a/0xa30 [ 2672.821019] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2672.821034] kmem_cache_alloc+0x159/0x310 [ 2672.821050] xas_alloc+0x336/0x440 [ 2672.821063] xas_create+0x34a/0x10d0 [ 2672.821083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2672.821100] xas_store+0x8c/0x1c40 [ 2672.821121] __xa_store+0x164/0x2d0 [ 2672.821134] ? xa_delete_node+0x280/0x280 [ 2672.821151] ? trace_hardirqs_on+0x5b/0x180 [ 2672.821169] xa_store+0x31/0x50 [ 2672.821184] __io_uring_add_tctx_node+0x1cf/0x520 [ 2672.821196] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2672.821206] ? alloc_fd+0x2e7/0x670 [ 2672.821225] io_uring_setup+0x1fbb/0x2980 [ 2672.821242] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2672.821252] ? wait_for_completion_io+0x270/0x270 [ 2672.821278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2672.821290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2672.821303] do_syscall_64+0x33/0x40 [ 2672.821314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2672.821321] RIP: 0033:0x7f7213914b19 [ 2672.821332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.821338] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2672.821350] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2672.821356] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2672.821363] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2672.821369] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2672.821375] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2672.865856] audit: type=1107 audit(1774544203.223:737): pid=19795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:56:57 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 53) 16:56:57 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) fork() ioctl$TCFLSH(r1, 0x5608, 0x0) 16:56:57 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 16:56:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x63e2, &(0x7f0000000000)={0x0, 0xacc7, 0x0, 0x2, 0x3e5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 16:56:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 16:56:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000, 0x0, 0x0) 16:56:57 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:56:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2686.987592] FAULT_INJECTION: forcing a failure. [ 2686.987592] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.989243] CPU: 0 PID: 19812 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2686.990240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.991426] Call Trace: [ 2686.991811] dump_stack+0x107/0x167 [ 2686.992341] should_fail.cold+0x5/0xa [ 2686.992904] ? xas_alloc+0x336/0x440 [ 2686.993430] should_failslab+0x5/0x20 [ 2686.993975] kmem_cache_alloc+0x5b/0x310 [ 2686.994554] xas_alloc+0x336/0x440 [ 2686.995059] xas_create+0x34a/0x10d0 [ 2686.995608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2686.996364] xas_store+0x8c/0x1c40 [ 2686.996883] __xa_store+0x164/0x2d0 [ 2686.997399] ? xa_delete_node+0x280/0x280 [ 2686.997995] ? trace_hardirqs_on+0x5b/0x180 [ 2686.998623] xa_store+0x31/0x50 [ 2686.999093] __io_uring_add_tctx_node+0x1cf/0x520 [ 2686.999781] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2687.000532] ? alloc_fd+0x2e7/0x670 [ 2687.001060] io_uring_setup+0x1fbb/0x2980 [ 2687.001656] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2687.002371] ? wait_for_completion_io+0x270/0x270 [ 2687.003078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2687.003822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.003870] audit: type=1107 audit(1774544217.357:738): pid=19808 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2687.004577] do_syscall_64+0x33/0x40 [ 2687.004593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2687.004603] RIP: 0033:0x7f7213914b19 [ 2687.004624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.009264] audit: type=1107 audit(1774544217.362:739): pid=19810 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2687.011503] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2687.011518] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2687.011526] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2687.011544] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2687.018040] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2687.019045] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2687.027279] Module has invalid ELF structures [ 2687.044749] Module has invalid ELF structures 16:56:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2687.121267] Module has invalid ELF structures [ 2703.914041] audit: type=1107 audit(1774544234.271:740): pid=19833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2703.929887] audit: type=1107 audit(1774544234.287:741): pid=19834 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' [ 2703.934947] FAULT_INJECTION: forcing a failure. [ 2703.934947] name failslab, interval 1, probability 0, space 0, times 0 [ 2703.937362] CPU: 0 PID: 19844 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2703.938757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.940445] Call Trace: [ 2703.941006] dump_stack+0x107/0x167 [ 2703.941754] should_fail.cold+0x5/0xa [ 2703.942551] ? create_object.isra.0+0x3a/0xa30 [ 2703.943487] should_failslab+0x5/0x20 [ 2703.944280] kmem_cache_alloc+0x5b/0x310 [ 2703.945125] ? mark_held_locks+0x9e/0xe0 [ 2703.945959] create_object.isra.0+0x3a/0xa30 [ 2703.946857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2703.947906] kmem_cache_alloc+0x159/0x310 [ 2703.948784] xas_alloc+0x336/0x440 [ 2703.949516] xas_create+0x34a/0x10d0 [ 2703.950293] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.951373] xas_store+0x8c/0x1c40 [ 2703.952121] __xa_store+0x164/0x2d0 [ 2703.952879] ? xa_delete_node+0x280/0x280 [ 2703.953743] ? trace_hardirqs_on+0x5b/0x180 [ 2703.953753] Module has invalid ELF structures [ 2703.955553] xa_store+0x31/0x50 [ 2703.956241] __io_uring_add_tctx_node+0x1cf/0x520 [ 2703.957251] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2703.958328] ? alloc_fd+0x2e7/0x670 [ 2703.959082] io_uring_setup+0x1fbb/0x2980 [ 2703.960000] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2703.961238] ? wait_for_completion_io+0x270/0x270 [ 2703.962354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2703.963541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2703.964704] do_syscall_64+0x33/0x40 [ 2703.965532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.965790] Module has invalid ELF structures [ 2703.966649] RIP: 0033:0x7f7213914b19 [ 2703.966672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2703.966683] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2703.966712] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2703.975679] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2703.977256] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2703.978840] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2703.980419] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:57:14 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) fork() ioctl$TCFLSH(r1, 0x5608, 0x0) 16:57:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:14 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 54) 16:57:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 16:57:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 16:57:14 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 16:57:14 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d63, &(0x7f0000000040)={0x0, 0xa762, 0x2, 0x3, 0x1f, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000b9d000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r7, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd, 0x7ff, 0x0, 0x0, 0xc, 0x1, {0x2, r8}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)="6f95bac4925bba9577f7dd3b7ed077994838c5597a3a4545f4841fc6f38e69182a540b9bcc18bc8886e327b061947bf79f07d81c6b4564aeac66dc87b7f7edd01c3232ebaf8bdaa0eed53351eaa6b1e0a1757ee6da9234cc6f6dbd56a59c1dc264c8121c4a6ef977e5691a111eb8de458b003b5908a53ec871557173823aef3f7c9686dba2255f0fafd07af003bb048db21a8a9b3436399bd71f1a36b6a1e0c7d50ff1f57c889026f38d35de7e5d46008dcd4c57e01fb455a625f5ad694fbd96927310ea17a7c6c31e619e7c0384", 0xce, 0x40010041, 0x0, {0x0, r8}}, 0x80000000) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r10, 0x401, 0xc23, 0x5, 0x9, 0x1}, 0x8) 16:57:14 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 16:57:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 16:57:14 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 16:57:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2704.100709] audit: type=1107 audit(1774544234.458:742): pid=19857 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='´' 16:57:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r1, 0x8000000) 16:57:14 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) fork() ioctl$TCFLSH(r1, 0x5608, 0x0) [ 2704.171279] Module has invalid ELF structures [ 2704.172158] Module has invalid ELF structures 16:57:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 16:57:14 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 16:57:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:14 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 55) 16:57:14 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2704.346209] FAULT_INJECTION: forcing a failure. [ 2704.346209] name failslab, interval 1, probability 0, space 0, times 0 [ 2704.348715] CPU: 1 PID: 19885 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2704.350198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2704.351961] Call Trace: [ 2704.352528] dump_stack+0x107/0x167 [ 2704.353325] should_fail.cold+0x5/0xa [ 2704.354155] ? xas_alloc+0x336/0x440 [ 2704.354950] should_failslab+0x5/0x20 [ 2704.355766] kmem_cache_alloc+0x5b/0x310 [ 2704.356657] xas_alloc+0x336/0x440 [ 2704.357428] xas_create+0x34a/0x10d0 [ 2704.358246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2704.359369] xas_store+0x8c/0x1c40 [ 2704.360132] __xa_store+0x164/0x2d0 [ 2704.360928] ? xa_delete_node+0x280/0x280 [ 2704.361822] ? trace_hardirqs_on+0x5b/0x180 [ 2704.362759] xa_store+0x31/0x50 [ 2704.363468] __io_uring_add_tctx_node+0x1cf/0x520 [ 2704.364499] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2704.365625] ? alloc_fd+0x2e7/0x670 [ 2704.366421] io_uring_setup+0x1fbb/0x2980 [ 2704.367316] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2704.368398] ? wait_for_completion_io+0x270/0x270 [ 2704.369464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2704.370586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2704.371695] do_syscall_64+0x33/0x40 [ 2704.372495] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2704.373604] RIP: 0033:0x7f7213914b19 [ 2704.374395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2704.378331] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2704.379957] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2704.381486] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2704.383013] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2704.384544] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2704.386065] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2704.404783] Module has invalid ELF structures [ 2721.095276] FAULT_INJECTION: forcing a failure. [ 2721.095276] name failslab, interval 1, probability 0, space 0, times 0 [ 2721.096999] CPU: 1 PID: 19996 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2721.097995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2721.099198] Call Trace: [ 2721.099592] dump_stack+0x107/0x167 [ 2721.100130] should_fail.cold+0x5/0xa [ 2721.100682] ? create_object.isra.0+0x3a/0xa30 [ 2721.101351] should_failslab+0x5/0x20 [ 2721.101906] kmem_cache_alloc+0x5b/0x310 [ 2721.102504] ? mark_held_locks+0x9e/0xe0 [ 2721.103117] create_object.isra.0+0x3a/0xa30 [ 2721.103771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2721.104491] kmem_cache_alloc+0x159/0x310 [ 2721.105119] xas_alloc+0x336/0x440 [ 2721.105656] xas_create+0x34a/0x10d0 [ 2721.106227] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2721.107007] xas_store+0x8c/0x1c40 [ 2721.107555] __xa_store+0x164/0x2d0 [ 2721.108101] ? xa_delete_node+0x280/0x280 [ 2721.108729] ? trace_hardirqs_on+0x5b/0x180 [ 2721.109250] xa_store+0x31/0x50 [ 2721.109635] __io_uring_add_tctx_node+0x1cf/0x520 [ 2721.110188] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2721.110789] ? alloc_fd+0x2e7/0x670 [ 2721.111218] io_uring_setup+0x1fbb/0x2980 [ 2721.111697] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2721.112278] ? wait_for_completion_io+0x270/0x270 [ 2721.112872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2721.113476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2721.114083] do_syscall_64+0x33/0x40 [ 2721.114512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2721.115100] RIP: 0033:0x7f7213914b19 [ 2721.115530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2721.117990] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2721.119226] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2721.120380] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e 16:57:31 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 56) 16:57:31 executing program 4: r0 = syz_io_uring_setup(0x4d4b, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x3982, &(0x7f0000000000)={0x0, 0x1e73, 0x2, 0x1, 0x2e1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 16:57:31 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:31 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) fork() 16:57:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 16:57:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 16:57:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 16:57:31 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2721.121631] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2721.121643] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2721.121655] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2721.141722] Module has invalid ELF structures [ 2721.162984] Module has invalid ELF structures 16:57:31 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:31 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 16:57:31 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x5}, 0x0) 16:57:31 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 16:57:31 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80400) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @l2={0x1f, 0x7, @any, 0x1f, 0x2}, @l2tp={0x2, 0x0, @multicast2, 0x1}, @isdn={0x22, 0x9, 0x81, 0x3f, 0x7}, 0x101, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)='bridge_slave_0\x00', 0x7, 0x3, 0x8}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/134, 0x86) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) 16:57:31 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) [ 2721.255024] Module has invalid ELF structures [ 2721.291043] Module has invalid ELF structures 16:57:31 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:31 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 57) 16:57:31 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2721.336360] Module has invalid ELF structures [ 2721.382302] Module has invalid ELF structures [ 2721.386350] FAULT_INJECTION: forcing a failure. [ 2721.386350] name failslab, interval 1, probability 0, space 0, times 0 [ 2721.388905] CPU: 0 PID: 20045 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2721.390467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2721.392341] Call Trace: [ 2721.392949] dump_stack+0x107/0x167 [ 2721.393787] should_fail.cold+0x5/0xa [ 2721.394651] ? xas_alloc+0x336/0x440 [ 2721.395498] should_failslab+0x5/0x20 [ 2721.396360] kmem_cache_alloc+0x5b/0x310 [ 2721.397294] xas_alloc+0x336/0x440 [ 2721.398099] xas_create+0x34a/0x10d0 [ 2721.398964] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2721.400142] xas_store+0x8c/0x1c40 [ 2721.400975] __xa_store+0x164/0x2d0 [ 2721.401801] ? xa_delete_node+0x280/0x280 [ 2721.402750] ? trace_hardirqs_on+0x5b/0x180 [ 2721.403728] xa_store+0x31/0x50 [ 2721.404475] __io_uring_add_tctx_node+0x1cf/0x520 [ 2721.405572] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2721.406751] ? alloc_fd+0x2e7/0x670 [ 2721.407590] io_uring_setup+0x1fbb/0x2980 [ 2721.408541] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2721.409693] ? wait_for_completion_io+0x270/0x270 [ 2721.410810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2721.411989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2721.413165] do_syscall_64+0x33/0x40 [ 2721.414003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2721.415155] RIP: 0033:0x7f7213914b19 [ 2721.415995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2721.420125] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2721.421858] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2721.423469] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2721.425088] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2721.426703] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2721.428314] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:57:46 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 58) 16:57:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x5}, 0x0) 16:57:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 16:57:46 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x6}, 0x0) 16:57:46 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) 16:57:46 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2736.436958] FAULT_INJECTION: forcing a failure. [ 2736.436958] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.439354] CPU: 0 PID: 20057 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2736.440833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2736.442611] Call Trace: [ 2736.442640] dump_stack+0x107/0x167 [ 2736.442663] should_fail.cold+0x5/0xa [ 2736.442687] ? create_object.isra.0+0x3a/0xa30 [ 2736.442706] should_failslab+0x5/0x20 [ 2736.442725] kmem_cache_alloc+0x5b/0x310 [ 2736.442746] ? mark_held_locks+0x9e/0xe0 [ 2736.442771] create_object.isra.0+0x3a/0xa30 [ 2736.442787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2736.442814] kmem_cache_alloc+0x159/0x310 [ 2736.442844] xas_alloc+0x336/0x440 [ 2736.442868] xas_create+0x34a/0x10d0 [ 2736.442902] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2736.442926] xas_store+0x8c/0x1c40 [ 2736.442965] __xa_store+0x164/0x2d0 [ 2736.442989] ? xa_delete_node+0x280/0x280 [ 2736.443019] ? trace_hardirqs_on+0x5b/0x180 [ 2736.443050] xa_store+0x31/0x50 [ 2736.449351] Module has invalid ELF structures [ 2736.449567] __io_uring_add_tctx_node+0x1cf/0x520 [ 2736.449590] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2736.449608] ? alloc_fd+0x2e7/0x670 [ 2736.449644] io_uring_setup+0x1fbb/0x2980 [ 2736.451943] Module has invalid ELF structures [ 2736.452727] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2736.452746] ? wait_for_completion_io+0x270/0x270 [ 2736.452796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.466262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2736.466290] do_syscall_64+0x33/0x40 [ 2736.467802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2736.467822] RIP: 0033:0x7f7213914b19 [ 2736.469339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.469351] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2736.469373] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2736.469393] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2736.476529] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2736.476541] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2736.476553] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2736.488876] Module has invalid ELF structures 16:57:46 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:46 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:46 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:57:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x6}, 0x0) 16:57:46 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x560a, &(0x7f0000000000)) [ 2736.553077] Module has invalid ELF structures [ 2736.594008] Module has invalid ELF structures 16:58:03 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 59) 16:58:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2752.751306] FAULT_INJECTION: forcing a failure. [ 2752.751306] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.752943] CPU: 1 PID: 20090 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2752.753868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.754964] Call Trace: [ 2752.755322] dump_stack+0x107/0x167 [ 2752.755811] should_fail.cold+0x5/0xa [ 2752.756319] ? xas_alloc+0x336/0x440 [ 2752.756816] should_failslab+0x5/0x20 [ 2752.757331] kmem_cache_alloc+0x5b/0x310 [ 2752.757877] xas_alloc+0x336/0x440 [ 2752.758354] xas_create+0x34a/0x10d0 [ 2752.758890] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.759877] xas_store+0x8c/0x1c40 16:58:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 16:58:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 16:58:03 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x7}, 0x0) 16:58:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r2 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r3, &(0x7f0000000040)={0x30000000}, r0, 0x3, 0x0, 0x1}, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) dup3(r1, r0, 0x0) 16:58:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x7}, 0x0) 16:58:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2752.760421] __xa_store+0x164/0x2d0 [ 2752.761095] ? xa_delete_node+0x280/0x280 [ 2752.761662] ? trace_hardirqs_on+0x5b/0x180 [ 2752.762242] xa_store+0x31/0x50 [ 2752.762688] __io_uring_add_tctx_node+0x1cf/0x520 [ 2752.763327] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2752.764024] ? alloc_fd+0x2e7/0x670 [ 2752.764520] io_uring_setup+0x1fbb/0x2980 [ 2752.765087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2752.765762] ? wait_for_completion_io+0x270/0x270 [ 2752.766422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2752.767151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2752.767847] do_syscall_64+0x33/0x40 [ 2752.768342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2752.769030] RIP: 0033:0x7f7213914b19 [ 2752.769545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2752.772020] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2752.773020] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2752.773968] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2752.774906] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2752.775883] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2752.776863] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2752.788319] Module has invalid ELF structures [ 2752.793806] Module has invalid ELF structures 16:58:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 16:58:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2752.867117] Module has invalid ELF structures 16:58:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) 16:58:03 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 16:58:03 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xa}, 0x0) 16:58:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:03 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 60) 16:58:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:03 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 16:58:03 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560a, &(0x7f0000000000)) [ 2752.984924] FAULT_INJECTION: forcing a failure. [ 2752.984924] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.986379] CPU: 1 PID: 20122 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2752.987210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.988202] Call Trace: [ 2752.988548] dump_stack+0x107/0x167 [ 2752.988994] should_fail.cold+0x5/0xa [ 2752.989457] ? create_object.isra.0+0x3a/0xa30 [ 2752.990002] should_failslab+0x5/0x20 [ 2752.990477] kmem_cache_alloc+0x5b/0x310 [ 2752.990963] ? mark_held_locks+0x9e/0xe0 [ 2752.991474] create_object.isra.0+0x3a/0xa30 [ 2752.991998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2752.992607] kmem_cache_alloc+0x159/0x310 [ 2752.993112] xas_alloc+0x336/0x440 [ 2752.993562] xas_create+0x34a/0x10d0 [ 2752.994014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.994644] xas_store+0x8c/0x1c40 [ 2752.995078] __xa_store+0x164/0x2d0 [ 2752.995518] ? xa_delete_node+0x280/0x280 [ 2752.996018] ? trace_hardirqs_on+0x5b/0x180 [ 2752.996540] xa_store+0x31/0x50 [ 2752.996936] __io_uring_add_tctx_node+0x1cf/0x520 [ 2752.997543] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2752.998165] ? alloc_fd+0x2e7/0x670 [ 2752.998609] io_uring_setup+0x1fbb/0x2980 [ 2752.999110] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2752.999712] ? wait_for_completion_io+0x270/0x270 [ 2753.000303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.000926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.001601] do_syscall_64+0x33/0x40 [ 2753.002074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.002681] RIP: 0033:0x7f7213914b19 [ 2753.003146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.005320] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.006217] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2753.007086] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2753.007947] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2753.008790] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2753.009676] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2753.019416] Module has invalid ELF structures [ 2753.031272] Module has invalid ELF structures [ 2753.065877] Module has invalid ELF structures 16:58:17 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xa}, 0x0) 16:58:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 16:58:17 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560a, &(0x7f0000000000)) 16:58:17 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 61) 16:58:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 16:58:17 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:17 executing program 4: ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x7}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)={0x244, 0x29, 0x22, 0x70bd2c, 0x25dfdbfb, {0x16}, [@generic="930682a662f40d0d14587c7fe4964bd45489ec43470f4ecbaa16c82b64bc53b39361efb9863b84889bf6466cc8", @nested={0x1eb, 0x8b, 0x0, 0x1, [@generic="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", @typed={0x4, 0x51}, @generic="b2b951591118466e7121d3cebd25dc4ccdc21397d4d2fca68a325d3f2b71f40ee26bd74a5b1436edb4ffd5225c65e923db7fc27b8b2b304fce8506ca61c8cb4bf76d9a3d72d5f1b334ce5c28b68602bb9b56da3f41affaa29ccc1de291ac7caae547d64a38bbeb4e3f59e2ddf8c476e026a396dd96adcf528a3800b63dfcf9898d10713bac604144b6f61c73b691977f6f0aedddd95b05d6f827b83cd8d32f538ffee2e6298287de696860905ca39f69d9d74634aa26872c033de3e14fdd69b8cc94e5dfbe51bbb25e69df6069a059ad663b3c5da59d5de4475e330bde2b11b04077afbcda3f", @generic]}, @nested={0x14, 0x80, 0x0, 0x1, [@typed={0x5, 0x89, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @pid}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000080}, 0x4085) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = timerfd_create(0x9, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0xc000000f}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x55, 0x5b, 0xff, 0x2d, 0x0, 0x5d6, 0x4, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x19}, 0x9000, 0x5, 0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r0, 0x8) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8400, 0x0) ftruncate(r5, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="01ed87c65e00000018000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000cc0)={r7, "f487553a9b44621608242c0fc9f41869"}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000640)={0x2, 0x3, {0x3, @usage=0x8, r7, 0x1, 0x0, 0xf99, 0x9, 0x1f, 0x8, @struct={0x7ff, 0x2}, 0xe6af, 0xaa1, [0x3, 0x5, 0x0, 0x8, 0x200, 0x9]}, {0x8, @usage=0x9, 0x0, 0x28c, 0x5, 0x6, 0xfffffffffffffffc, 0xff, 0xa2, @usage=0x7, 0x10000, 0x98c0, [0x3, 0x400, 0x1, 0x5, 0x20, 0x8]}, {0x8, @usage=0xfffffffffffffffa, 0x0, 0x8, 0x8001, 0x4, 0xffffffffffffffff, 0x8000, 0x42, @usage=0x9, 0x401, 0x0, [0xfc, 0x8, 0x7, 0x6, 0x101, 0x7]}, {0x3, 0x0, 0x7fffffff}}) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r8, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2766.918891] FAULT_INJECTION: forcing a failure. [ 2766.918891] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.921328] CPU: 1 PID: 20152 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2766.922804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.924586] Call Trace: [ 2766.925152] dump_stack+0x107/0x167 [ 2766.925946] should_fail.cold+0x5/0xa [ 2766.926767] ? ___slab_alloc+0x360/0x700 [ 2766.927659] ? create_object.isra.0+0x3a/0xa30 [ 2766.928648] should_failslab+0x5/0x20 [ 2766.929460] kmem_cache_alloc+0x5b/0x310 [ 2766.930330] create_object.isra.0+0x3a/0xa30 [ 2766.931265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2766.932384] kmem_cache_alloc+0x159/0x310 [ 2766.933294] xas_alloc+0x336/0x440 [ 2766.934050] xas_create+0x34a/0x10d0 [ 2766.934856] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2766.935979] xas_store+0x8c/0x1c40 [ 2766.936769] __xa_store+0x164/0x2d0 [ 2766.937571] ? xa_delete_node+0x280/0x280 [ 2766.938462] ? trace_hardirqs_on+0x5b/0x180 [ 2766.939384] xa_store+0x31/0x50 [ 2766.940088] __io_uring_add_tctx_node+0x1cf/0x520 [ 2766.941133] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2766.942046] Module has invalid ELF structures [ 2766.942272] ? alloc_fd+0x2e7/0x670 [ 2766.942319] io_uring_setup+0x1fbb/0x2980 [ 2766.943873] Module has invalid ELF structures [ 2766.944044] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2766.946896] ? wait_for_completion_io+0x270/0x270 [ 2766.947946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2766.949064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2766.950270] do_syscall_64+0x33/0x40 [ 2766.951078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2766.952165] RIP: 0033:0x7f7213914b19 [ 2766.952975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.956939] RSP: 002b:00007f7210e8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2766.958562] RAX: ffffffffffffffda RBX: 00007f7213a27f60 RCX: 00007f7213914b19 [ 2766.960106] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2766.961633] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2766.963160] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000140 [ 2766.964680] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 16:58:17 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) sync_file_range(r1, 0x2, 0x8, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x560a, &(0x7f0000000000)) 16:58:17 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 16:58:17 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x48}, 0x0) 16:58:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) [ 2767.159084] Module has invalid ELF structures [ 2767.161345] Module has invalid ELF structures 16:58:34 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:34 executing program 6: r0 = socket$inet(0x2, 0x2, 0xffffffbd) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) fchmod(r0, 0xd0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x560a, &(0x7f0000000000)) 16:58:34 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) 16:58:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 16:58:34 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x4c}, 0x0) 16:58:34 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x48}, 0x0) 16:58:34 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008001}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3bac}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x26}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4004004) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}}, 0x4008000) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040012}, 0x0) r3 = socket$inet(0x2, 0x80000, 0x10000) shutdown(r3, 0x1) recvfrom$inet(r3, &(0x7f00000004c0)=""/211, 0xd3, 0x10100, &(0x7f00000005c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x470, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "ea0219e939e4978fdbaf0f8717a313d7c67725ee90120274ec9392e8842c84b49797127e9818724522b00156d1013734edf11e4e46803f22ca91bbe6b9d03ec57ee88c06adbe88c898edaa9172069b41a19fd08ec5dd353451caa1d1738b3e1b7b"}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "369581423c2c147cff3e643e2cfa7062bdd379200da0e42483e95a061fc59783579d1d44a04d58663a40be9e878d"}]}, @ETHTOOL_A_WOL_SOPASS={0x4d, 0x3, "31d402456d5846e9fea00726f5bf14f966a335cda18c1dbc06589151891e46dab16502d334908d4d0db309eee479a007bcf6fd285635845a381e06201167a9bf9bdf84ea6b57118b3a"}, @ETHTOOL_A_WOL_MODES={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "a3a998034f107c7a4fef45035bcf6dfe799de33b6095c87002e74d65788b35f956e345d7496cfec970fcfd94458fcf8b19050ec8a1a6a3d5203ea51f5b830c2d3859ba56d3d1263998"}]}, @ETHTOOL_A_WOL_MODES={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "a8366b1a5112a9c053bb5be900173bf1f0a4c0916d4a97eb6d99564b29639a488919897b719edb81fd8fdaff38bea7b80893048e50384931012c1e429849d4407294a4fdf3"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "f736355ec34db551e0bf5abb2a8177192c023f1397b9a2cf5529b5c07037b8e66d498e"}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "fb3b95e7d7b846ba144e13707773da812189e043e34d1a4335dc525080e4c7643fcc30ae155032729046516fac9ee2de4ec4417e24a39ee5814bad7c90ca41cac15d9a6ef0055b6c1f8c8cfeac62985534304e2b52f0cf5da32e159f9b41e851eb31af7d62091ce114cd9e38a85439f3e6d7f0b05edb0d06e57b6f1e9850d31ea185fa6ac7eb68574f16c7ef7dc57f264628d677191e33fb54ac508ab9c556bb5b45c141b830b9bcd30331252ad53b4f6c1d5a1e0211ac2e12a08988d99c1bfd670430c4062a148e97cfd12550200549b00039a0030363532f89672386f3d4c7c8846f6a7e8523e8751ec165700b"}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "9c87125acea10fa25d97d804a6f35692e4c3f602e847f9a52a0f2a7c837d7dd214ec3445f8788d406ae7d597549aa9ede4c8729e2c8fe2711617671f025c10d0fc6db66cb34ee4d8fc4dbcbd"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xa3, 0x3, "ac4c69b19fadd29cc63420682a2f7c723c3c0c248c4712584ce85125a4f7775a9e5481924640529aef64bacf0f59f20d26da7245c326da6f24ffb110b209319cab64109873e5f3d33cbd68ea99bbe6124aa282755422bec32ec0900002382e9d7ab4cdaf7ffe322fcc8ecdb800d40fe5c84bd8605dd307bfa8d38a532f2767f8277abd8692481599b9acc6e69e7acca2e673ecd3df0048db1e01dc81c40209"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x8805}, 0x4881) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xaea}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000800) signalfd(r3, &(0x7f0000000cc0)={[0x2]}, 0x8) r6 = signalfd(r3, &(0x7f0000000d40)={[0x5]}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r6) openat(r1, &(0x7f0000000d80)='./file0\x00', 0xa6200, 0x13b) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000dc0)={{0x33, @multicast2, 0x4e23, 0x4, 'ovf\x00', 0x20, 0x1, 0x77}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e23, 0x2002, 0x9, 0x3, 0x2}}, 0x44) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f5, 0x10, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 16:58:34 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 62) [ 2783.921304] FAULT_INJECTION: forcing a failure. [ 2783.921304] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.923802] CPU: 0 PID: 20194 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2783.925301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.925309] Call Trace: [ 2783.925335] dump_stack+0x107/0x167 [ 2783.925359] should_fail.cold+0x5/0xa [ 2783.925382] ? create_object.isra.0+0x3a/0xa30 [ 2783.925418] should_failslab+0x5/0x20 [ 2783.925437] kmem_cache_alloc+0x5b/0x310 [ 2783.925465] create_object.isra.0+0x3a/0xa30 16:58:34 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x4c}, 0x0) [ 2783.925482] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.925509] kmem_cache_alloc+0x159/0x310 [ 2783.925538] vm_area_dup+0x78/0x290 [ 2783.925561] ? lock_release+0x680/0x680 [ 2783.925585] ? mark_lock+0xf5/0x2df0 [ 2783.925614] ? lock_chain_count+0x20/0x20 [ 2783.925634] ? mark_lock+0xf5/0x2df0 [ 2783.925661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 16:58:34 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x68}, 0x0) 16:58:34 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2783.925681] ? lock_chain_count+0x20/0x20 [ 2783.925707] ? mark_lock+0xf5/0x2df0 [ 2783.925729] ? vm_area_alloc+0x110/0x110 [ 2783.925754] ? __lock_acquire+0x1657/0x5b00 16:58:34 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2783.925797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2783.925816] ? SOFTIRQ_verbose+0x10/0x10 [ 2783.925833] ? vmacache_find+0x55/0x2a0 [ 2783.925855] __split_vma+0xa8/0x4e0 [ 2783.925879] __do_munmap+0x365/0x1260 [ 2783.925901] ? arch_get_unmapped_area+0x450/0x450 [ 2783.925923] ? lock_release+0x680/0x680 [ 2783.925946] mmap_region+0x7cc/0x1500 16:58:34 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 63) 16:58:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) [ 2783.925984] do_mmap+0x868/0x1370 [ 2783.926016] vm_mmap_pgoff+0x198/0x1f0 [ 2783.926042] ? randomize_page+0xb0/0xb0 [ 2783.926080] ksys_mmap_pgoff+0x41c/0x560 [ 2783.926102] ? find_mergeable_anon_vma+0x250/0x250 [ 2783.926127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.926149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.926173] do_syscall_64+0x33/0x40 [ 2783.926194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.926207] RIP: 0033:0x7f7213914b62 [ 2783.926225] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2783.926235] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2783.926256] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2783.926268] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2783.926279] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2783.926290] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2783.926302] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2783.933247] Module has invalid ELF structures [ 2783.936076] Module has invalid ELF structures 16:58:34 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x68}, 0x0) [ 2784.145811] FAULT_INJECTION: forcing a failure. [ 2784.145811] name failslab, interval 1, probability 0, space 0, times 0 [ 2784.145835] CPU: 0 PID: 20216 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2784.145846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.145852] Call Trace: [ 2784.145878] dump_stack+0x107/0x167 [ 2784.145901] should_fail.cold+0x5/0xa [ 2784.145923] ? anon_vma_clone+0xdc/0x590 [ 2784.145940] should_failslab+0x5/0x20 [ 2784.145959] kmem_cache_alloc+0x5b/0x310 [ 2784.145986] anon_vma_clone+0xdc/0x590 [ 2784.146018] __split_vma+0x17c/0x4e0 [ 2784.146041] __do_munmap+0x365/0x1260 16:58:34 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x6c}, 0x0) [ 2784.146062] ? arch_get_unmapped_area+0x450/0x450 [ 2784.146084] ? lock_release+0x680/0x680 [ 2784.146106] mmap_region+0x7cc/0x1500 [ 2784.146142] do_mmap+0x868/0x1370 [ 2784.146173] vm_mmap_pgoff+0x198/0x1f0 [ 2784.146198] ? randomize_page+0xb0/0xb0 [ 2784.146234] ksys_mmap_pgoff+0x41c/0x560 [ 2784.146262] ? find_mergeable_anon_vma+0x250/0x250 [ 2784.146286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.146306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.146330] do_syscall_64+0x33/0x40 [ 2784.146349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.146362] RIP: 0033:0x7f7213914b62 [ 2784.146378] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2784.146388] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 16:58:34 executing program 4: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x34b03c3d9eeff9c8}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x83010, r0, 0x8000000) io_uring_enter(r0, 0x3727, 0x0, 0x0, 0x0, 0x0) [ 2784.146408] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2784.146419] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2784.146429] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2784.146440] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2784.146456] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2784.152288] Module has invalid ELF structures [ 2784.159811] Module has invalid ELF structures 16:58:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x7fffe000, 0x0, 0x0) 16:58:50 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 64) [ 2800.125992] FAULT_INJECTION: forcing a failure. [ 2800.125992] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.128536] CPU: 1 PID: 20339 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2800.130067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.131877] Call Trace: [ 2800.132458] dump_stack+0x107/0x167 [ 2800.133258] should_fail.cold+0x5/0xa [ 2800.134105] ? create_object.isra.0+0x3a/0xa30 [ 2800.135100] should_failslab+0x5/0x20 [ 2800.135931] kmem_cache_alloc+0x5b/0x310 [ 2800.136825] create_object.isra.0+0x3a/0xa30 [ 2800.137789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.138902] kmem_cache_alloc+0x159/0x310 [ 2800.139820] anon_vma_clone+0xdc/0x590 [ 2800.140681] __split_vma+0x17c/0x4e0 [ 2800.141497] __do_munmap+0x365/0x1260 [ 2800.142338] ? arch_get_unmapped_area+0x450/0x450 [ 2800.143395] ? lock_release+0x680/0x680 [ 2800.144261] mmap_region+0x7cc/0x1500 [ 2800.145102] do_mmap+0x868/0x1370 [ 2800.145874] vm_mmap_pgoff+0x198/0x1f0 16:58:50 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x6c}, 0x0) 16:58:50 executing program 6: socket$inet(0x2, 0x2, 0xffffffbd) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x560a, &(0x7f0000000000)) 16:58:50 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x74}, 0x0) 16:58:50 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2800.146722] ? randomize_page+0xb0/0xb0 [ 2800.147817] ksys_mmap_pgoff+0x41c/0x560 16:58:50 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbb, 0x7}, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000975e0020e3d2efb20b7434d58885fb68a41646af431b9c77732460221cfde90b1e4238ea057496110b2b34207a99236567dbce89bd0cd7569639e2a000bacd42adf5c063b46af3a311769f06290d84fa630e63ae2c624a671b49975209ed1c4139347205c3b7e90530795023537d923888f148cc2376", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r2 = fork() ptrace(0x10, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x7}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700), 0x402, 0x0) perf_event_open(&(0x7f0000001680)={0x3, 0x80, 0x80, 0x1f, 0x7f, 0xfe, 0x0, 0x7fff, 0x8001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x7fff}, 0x59a42, 0x7fffffff, 0x4, 0x9, 0x80000001, 0x1b58916e, 0x4, 0x0, 0x10000, 0x0, 0x7}, r2, 0x3, r3, 0x2) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x37, 0x8b, 0x3, 0x0, 0x0, 0x3, 0x844, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000100)}, 0x2823, 0x7ff, 0x3f, 0x6, 0x4557, 0x81, 0x0, 0x0, 0xffff, 0x0, 0x1ff}, 0xffffffffffffffff, 0xd, r1, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000080)=""/16, &(0x7f00000000c0)=0x10) ioctl$SG_IO(r4, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000001440)=""/220, 0xdc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000380)=0xc) 16:58:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2800.148848] ? find_mergeable_anon_vma+0x250/0x250 [ 2800.150004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.151137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.152257] do_syscall_64+0x33/0x40 [ 2800.153111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.154230] RIP: 0033:0x7f7213914b62 [ 2800.155034] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2800.159039] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2800.160685] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2800.162246] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 16:58:50 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x74}, 0x0) [ 2800.162258] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2800.162276] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2800.166488] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2800.191942] Module has invalid ELF structures [ 2800.200003] Module has invalid ELF structures 16:58:50 executing program 6: socket$inet(0x2, 0x2, 0xffffffbd) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560a, &(0x7f0000000000)) 16:58:50 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x7a}, 0x0) [ 2800.264122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2800.264959] print_req_error: 685 callbacks suppressed [ 2800.264972] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4800 phys_seg 32 prio class 0 [ 2800.267272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2800.268066] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4800 phys_seg 32 prio class 0 16:58:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) 16:58:50 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2800.280389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2800.281180] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 16:58:50 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x7a}, 0x0) 16:58:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2800.335824] Module has invalid ELF structures 16:58:50 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) [ 2800.370175] Module has invalid ELF structures 16:58:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2800.440403] Module has invalid ELF structures 16:59:05 executing program 6: socket$inet(0x2, 0x2, 0xffffffbd) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560a, &(0x7f0000000000)) 16:59:05 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:05 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000003c0)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cramfs\x00', 0x40001, &(0x7f0000000480)='wpan4\x00') ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000006980)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006940)={&(0x7f0000002e00)={0x3b24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x7c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x5c, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffc1}, @NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0xf, 0x0, @random="a784a2d6c5e1e532aea512"}, {0x13, 0x0, @random="d8d2692728d6791101f015a49485da"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x10, 0x0, @random="4616893eb0fae325c3a91211"}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3864, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2360, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0xa6, 0x3, "edc5cd21f9cd211bb22c8b3d405a2a0ccccfb8aba86148a581649786f37a9773aac315949ecbb660b739644f7360c922f57ba6088004cc27c8b5de230383bde631e6a16d9c7c79ac7d9aac759323a019ae1a2c4a85fc49ef305c82203ab70837660f818a13d593457cc73d6970eaa9498d435f7adc8cf6e16bdf00bb20d77ff1eaf91762e437afee49c3193a2945e84d82a9bc762c81fdf7841dd9f60d6f5c2f1030"}, @NL80211_BAND_5GHZ={0x4c, 0x1, "466105d3f755489b159a7e34a97c4047f5272029697463f28fa384dafaef79f1c8417261e505bdb87ea7c939c3440310de3a40cc356f11e2b79e18b7c12b44199dbb5bf4c5b4d347"}, @NL80211_BAND_60GHZ={0x36, 0x2, "adfba404bfee967f19b80c437b0ee524cd3f166441e676db8e05ed23782231655e8ee60846711bdc046246f6ffe5f3329e8f"}, @NL80211_BAND_5GHZ={0xb7, 0x1, "e3d85b717aee3da8688fe8ceff1b00d0fdef2a6c0636ae6f781ed10dab65f64bd4bc097120df9f36c5b9eb97a8ec45760666e36b01d11329195efd905774a945c97181b716b150bf27a5245b345332a3625bb2dfa54e89a664c067c876f9f1582190255bbd894552e748f62d118e970cf5a096ab514e26d360b08e155b57ad2ea819a4fac0070030bce0dff40bb0b3480e3bd98ee5ab1081e654eb1b8cc76600506578463730ced527b544839918d8dc330cba"}, @NL80211_BAND_6GHZ={0xd7, 0x3, "dd77b04dc48d90f9a8fd3c8b6efe9253d83655e4a483e8edf628c44abd08afe4ff73c82d55dad05fab5a1ea014e42d163684a53b9088d5050190947a23a9c73e14f0dd69556bca574e21a8d5f62a21a4f31c99be0bf5cd898212731aad8786ed64290c0af57145a5506097b3eb78416013a2d9d5426073edc282d79319acc15178e576d5e8467083d2359c17aa335cce9bc294164aef41b87335964cb57d061fdedf89aaa8b4fbc658d658e7265356cd2d7645ec797daf3e5377c6c85a06bffe64e2a3a3a5b23825a3bac3f5d74b70c3910c10"}, @NL80211_BAND_5GHZ={0x12, 0x1, "282584d4dd937539a81d5e7b9a5c"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1034, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_6GHZ={0x29, 0x3, "0e558de13afc387ec9d296149cacc6587b156016e328eaeba52d382788d6c917f4c4177a78"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x3f}, {0x8, 0x0, 0x2e}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x28, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x80}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd20}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x14c8, 0x4, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4c, 0x1, "dcf8a1c7ebec33fa52568117863efbfddead780922bc5a36abc32adb21bd93198664e5780bcc86bb3069d47bbafe95419bbe87470f8612ff940688c24f8d679fc678a129d688277b"}]}, {0x1474, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x56, 0x1, "616e65617295d1e7148e15ecaa60043f1b4f5f7e251f65e64bd7aab5710834bb0d746e1f3801b366d22c42ee7da6fb6d17345c254aececd96113c106b5054ae38418b7e9d1d2632d578c6183676e809ceaee"}, @NL80211_PKTPAT_MASK={0x7b, 0x1, "404847efea6fb8cd87a3d371c192694a1f624423773ff326bf1dab348fadd5e15ab65307aac511ed194dee0d392b8028fbed2d8b162f76099cdf29530b21a63dcb5c4c60698d905b685bfc706f294e3d90ccfbc2c8fc651d46fef4ca7ec91b5d01739c1cd4f575692a964bfca204f25f6686d1cc9e8e5d"}, @NL80211_PKTPAT_PATTERN={0x80, 0x2, "a823bf405df9ac345d034e1c18af66b9c86f18f00f5f336495900d37e082e33b2e53634289b9c361342f541e077bf2967aa7edd1ee57e663a7823736145cd1bad08e655e45afd3d401a1ab025c82196ace095b5381c5db5ee8d187bb7540e7367016a03b6c1d6c7f641aacaaa8d6e92aff22e473a7603e0072140e32"}, @NL80211_PKTPAT_MASK={0x2c, 0x1, "8c7a5889b7eddc82b9f9bad0d7520d69058596d6292ae7a837975a39e80e6d59c2c535c35a069f2a"}, @NL80211_PKTPAT_MASK={0xc0, 0x1, "6677ecd61ecdce8013e19d13964580d47bc1bbf3cc7e0a2a10eb217fca7b559b1bfac38c8142f0da1b9d99f33defde2078ce85e44deebd0b8bce67a4ea51fda61ed27f7e7a67823ee8e7fe143eec8b32667054e7e71b1a94fa93d3c073523ec9a0bea8ab2d48b67fd299d35b0234c9b25db93b6fe426a6895d6ceac7d23f77ae1f56fb35f373110b3d2cd01b0af3aeede9d12905582c53e34154fa4159d1b6076694b9407f0343ed5b6687240d2908d49b38ded70e7f5a1dfaa759ce"}, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "9f628bfa840c45dcbbd68031fd647f8156a9f4bc7b2026c5757d97d644a090123c1a90443417f11b9d085839f6f6b8f4b5dd2f4b47315ea2b5ab057972eac1d42bef08234100010d41142911a0c0a93fd9ff972582d3caf666b5ca80165237a819475450e678abadd50f4b4609b17a933a0cd4712d60"}, @NL80211_PKTPAT_MASK={0xb2, 0x1, "b1718ac2ede8287066fdffb28d84501fe0ab7bff2c35d28212474fd6014c024c25b6b28f6b42147332490a042fb2e9c65d5f6fdd8904f88db1440f2d022e5772a4f3009b4a086aa7eea3ef7bb2e8bb9dbe40ca7d586fd10f480781a65766660695b3df4837afd624cae141cceaaf63a04d5e2b25d517392c38a0f0a982a0d373e3d144b328ed3741e4f0ad07de3a51ae37813a2eb9281c4f5bb93b9afbc35172c8780c6c534401da1f23a35efb8a"}, @NL80211_PKTPAT_PATTERN={0xfa, 0x2, "7182ca641936b99d1efa8a72a3c400144736a20baa3003e55e2bececb0e2006110980c75a3a51baeb7eaea123ba0e28eb38160d625f5e7d928db87d540427ac32371d10c3dc3fb64a790e02298171b8018d0e2fd9b1408cb7f8076b0bd1eca4d8822ab83770627de7e7ada24dc462367d54b02a0032529ede998918220a0786d8337c11f9e43352c84f92e3e617959336a0a47e868cde2a8213f1e36921cc1857f98f727b27a71571f9c3ab943dc1249fbd2d6544e31ee7fba9552f138fc2434301fcbf1b9c574148d5d01a169ed1dd3d0025ff0ab0a3ac40485d49d25408b7f220d13ddcb425c98ceb179c85c57d83663ad9c2d5b98"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x228, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1fc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xfb, 0x6, "0f07e39cabec01765a6b5b4663306608cf204e8da81c1ace0f79d31b5fcf378991398ce4879b201c030d34153591b7440bbe1238daed47d0c7bf4397b5fa9003dc800e80f4414b3faf42f6bebfcb0b045a6fa033fcc29b31cc5e9e38374e799d6cd971f2b08cd027c24a64643f5161a8f83cf7e9ab1a1a0f6d87affe5c79dd71a61f6ae1d789e4767ba04ec9b8d90b9ee33a7a3e5e1093665106de4fe319b026bb8fceac8ca97be75c7d2b070ceb19d2aa1a030734bf49ebecc9e4b4350875488070d526d51ac481ce5db1bcf4a054695f9cdb8dac74acfd04aa3b07bc23d296cf043a2866e49f7a8cc630cf5ae8a1e9ba82442ed0d921"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @remote}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x2c, 0x6, "890b78b4238244f59dd5dd792570ff3f2d0a4159aad1f0e272709a90f86ae94207b105601483457d"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xa0, 0xa, "88898457f4bdc4dbaeea8457e3d6a4b00385d21a325bb6c75e19219ad096344f288fdb5cc0fe85710e80ef8f02e910a45f0f30b1bb8042354f7a8191090d8b3e15e6a2a447e5df34e1b63d01a6bd34772c637e0bc16f8ce6f9c49999be3c34dc2944b717303288a6cd2b235a7338d8ec309056533cc25fcfe1ae6c05ed193efc65ea42eda2777698cc243c05cabbf3f3f0911a93df7dcdf542427308"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010101}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8000}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3c6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x3b24}, 0x1, 0x0, 0x0, 0x800}, 0x8004881) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdc00, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8006}, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r4) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:59:05 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 65) 16:59:05 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x9f}, 0x0) 16:59:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000000, 0x0, 0x0) 16:59:05 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x128}, 0x0) [ 2815.125599] FAULT_INJECTION: forcing a failure. [ 2815.125599] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.126157] Module has invalid ELF structures [ 2815.128261] CPU: 1 PID: 20392 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2815.128274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.128281] Call Trace: [ 2815.128309] dump_stack+0x107/0x167 [ 2815.128334] should_fail.cold+0x5/0xa [ 2815.128358] ? create_object.isra.0+0x3a/0xa30 [ 2815.128378] should_failslab+0x5/0x20 [ 2815.128402] kmem_cache_alloc+0x5b/0x310 [ 2815.137334] create_object.isra.0+0x3a/0xa30 [ 2815.138327] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2815.139476] kmem_cache_alloc+0x159/0x310 [ 2815.140410] anon_vma_clone+0xdc/0x590 [ 2815.141290] __split_vma+0x17c/0x4e0 [ 2815.142133] __do_munmap+0x365/0x1260 [ 2815.142984] ? arch_get_unmapped_area+0x450/0x450 [ 2815.144059] ? lock_release+0x680/0x680 [ 2815.144943] mmap_region+0x7cc/0x1500 [ 2815.145812] do_mmap+0x868/0x1370 [ 2815.146589] vm_mmap_pgoff+0x198/0x1f0 [ 2815.147459] ? randomize_page+0xb0/0xb0 [ 2815.148365] ksys_mmap_pgoff+0x41c/0x560 [ 2815.149266] ? find_mergeable_anon_vma+0x250/0x250 [ 2815.150367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.151526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2815.152675] do_syscall_64+0x33/0x40 [ 2815.153501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2815.154642] RIP: 0033:0x7f7213914b62 [ 2815.155466] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2815.159533] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 16:59:05 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x300}, 0x0) [ 2815.161223] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2815.163018] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2815.164488] Module has invalid ELF structures [ 2815.164602] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2815.164614] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2815.164635] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2815.176776] loop4: detected capacity change from 0 to 16776704 [ 2815.190606] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 2815.190606] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2815.190606] 16:59:05 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2815.226741] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,,errors=continue [ 2815.247805] Module has invalid ELF structures 16:59:05 executing program 6: socket$inet(0x2, 0x2, 0xffffffbd) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560a, &(0x7f0000000000)) [ 2815.316087] Module has invalid ELF structures 16:59:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x500}, 0x0) 16:59:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7f, 0xfff, 0x66, @mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8, 0x7800, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x3, 0x20, 0x8, 0x47, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @private0, 0x8000, 0x8000, 0x9, 0xfc0}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x13, 0x0, 0x0) 16:59:20 executing program 6: socket$inet(0x2, 0x2, 0xffffffbd) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x10000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x560a, &(0x7f0000000000)) 16:59:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 16:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:20 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 66) 16:59:20 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) [ 2830.161281] FAULT_INJECTION: forcing a failure. [ 2830.161281] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.163768] CPU: 0 PID: 20439 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2830.163779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.163786] Call Trace: [ 2830.163813] dump_stack+0x107/0x167 [ 2830.163837] should_fail.cold+0x5/0xa [ 2830.163860] ? create_object.isra.0+0x3a/0xa30 [ 2830.163879] should_failslab+0x5/0x20 [ 2830.163899] kmem_cache_alloc+0x5b/0x310 [ 2830.163926] create_object.isra.0+0x3a/0xa30 16:59:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x300}, 0x0) [ 2830.163943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2830.163970] kmem_cache_alloc+0x159/0x310 [ 2830.163999] vm_area_alloc+0x1c/0x110 [ 2830.164017] mmap_region+0x982/0x1500 16:59:20 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 67) 16:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2830.164055] do_mmap+0x868/0x1370 [ 2830.164088] vm_mmap_pgoff+0x198/0x1f0 16:59:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x600}, 0x0) [ 2830.164114] ? randomize_page+0xb0/0xb0 [ 2830.164152] ksys_mmap_pgoff+0x41c/0x560 [ 2830.164175] ? find_mergeable_anon_vma+0x250/0x250 [ 2830.164202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.164223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.164248] do_syscall_64+0x33/0x40 [ 2830.164268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.164281] RIP: 0033:0x7f7213914b62 [ 2830.164298] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2830.164309] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2830.164330] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2830.164341] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2830.164352] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 16:59:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) io_uring_enter(r0, 0x58ab, 0x0, 0xe0ff7f00000000, 0x0, 0x0) 16:59:20 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2830.164363] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2830.164374] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2830.176877] Module has invalid ELF structures [ 2830.200843] Module has invalid ELF structures [ 2830.359085] FAULT_INJECTION: forcing a failure. [ 2830.359085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2830.359118] CPU: 0 PID: 20460 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2830.359130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 16:59:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x500}, 0x0) [ 2830.359137] Call Trace: [ 2830.359166] dump_stack+0x107/0x167 [ 2830.359192] should_fail.cold+0x5/0xa [ 2830.359221] __alloc_pages_nodemask+0x182/0x600 [ 2830.359249] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2830.359282] ? walk_mem_res+0x170/0x170 [ 2830.359314] alloc_pages_current+0x187/0x280 [ 2830.359340] pte_alloc_one+0x16/0x1a0 [ 2830.359362] __pte_alloc+0x1d/0x330 [ 2830.359390] remap_pfn_range_internal+0x9a3/0xf60 [ 2830.359430] ? lookup_memtype+0x5b/0x200 [ 2830.359471] ? apply_to_existing_page_range+0x40/0x40 16:59:20 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) 16:59:20 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x453, 0x0, 0x0, 0x0, "b4"}, 0x14}, 0x1, 0x0, 0x700}, 0x0) [ 2830.359509] remap_pfn_range+0xcd/0x160 [ 2830.359533] ? remap_pfn_range_notrack+0x70/0x70 16:59:20 executing program 0: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 68) [ 2830.359559] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2830.359590] io_uring_mmap+0x398/0x530 [ 2830.359617] mmap_file+0x5e/0xe0 [ 2830.359637] mmap_region+0xc4d/0x1500 [ 2830.359678] do_mmap+0x868/0x1370 [ 2830.359711] vm_mmap_pgoff+0x198/0x1f0 [ 2830.359739] ? randomize_page+0xb0/0xb0 [ 2830.359780] ksys_mmap_pgoff+0x41c/0x560 [ 2830.359804] ? find_mergeable_anon_vma+0x250/0x250 16:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x10800800, &(0x7f0000001600), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x26}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000003c0)=""/128, &(0x7f0000001500)}, 0x58) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x19, 0x4, 0x1, 0x0, 0x5, 0x41100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1000, 0x7ff, 0x8, 0x5, 0x100000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r3, 0x6, r0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xfffffffffffffffb, r2, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_create(&(0x7f0000000100)='\x00', 0x0) finit_module(r1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3f, 0x2, 0x0, 0x0, 0x10001, 0x400c0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffffa}, 0x9080, 0x3, 0x6, 0x0, 0x9, 0x3ff, 0x9c54, 0x0, 0x9, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x2) [ 2830.359832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.359855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.359881] do_syscall_64+0x33/0x40 [ 2830.359903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.359916] RIP: 0033:0x7f7213914b62 [ 2830.359935] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2830.359946] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2830.359968] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2830.359980] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2830.359992] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2830.360004] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2830.360015] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2830.368244] ------------[ cut here ]------------ [ 2830.368279] WARNING: CPU: 0 PID: 20460 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2830.368286] Modules linked in: [ 2830.368312] CPU: 0 PID: 20460 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 2830.368323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.368345] RIP: 0010:get_pat_info+0x216/0x270 [ 2830.368364] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 b1 88 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 9a 88 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 b5 a5 5a 00 e9 [ 2830.368376] RSP: 0018:ffff88804a807890 EFLAGS: 00010216 [ 2830.368396] RAX: 000000000000aa43 RBX: ffff888044056600 RCX: ffffc9000081b000 [ 2830.368409] RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007 [ 2830.368429] RBP: ffff88804a807948 R08: 0000000000000000 R09: ffff88804a807818 [ 2830.368480] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2830.368493] R13: 1ffff11009500f12 R14: 0000000000000000 R15: ffff888044056650 [ 2830.368513] FS: 00007f7210e8a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2830.368529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2830.368542] CR2: 0000000020000108 CR3: 000000004abe0000 CR4: 0000000000350ef0 [ 2830.368549] Call Trace: [ 2830.368581] ? pgprot_writethrough+0xc0/0xc0 [ 2830.368621] ? finish_task_switch+0x126/0x5d0 [ 2830.368638] ? finish_task_switch+0xef/0x5d0 [ 2830.368675] untrack_pfn+0xdc/0x240 [ 2830.368698] ? track_pfn_insert+0x150/0x150 [ 2830.368723] ? lock_downgrade+0x6d0/0x6d0 [ 2830.368743] ? uprobe_munmap+0x1c/0x560 [ 2830.368773] unmap_single_vma+0x1bc/0x300 [ 2830.368805] zap_page_range_single+0x2ce/0x450 [ 2830.368830] ? unmap_single_vma+0x300/0x300 [ 2830.368851] ? remap_pfn_range_internal+0xc56/0xf60 [ 2830.368883] ? lookup_memtype+0x5b/0x200 [ 2830.368924] ? apply_to_existing_page_range+0x40/0x40 [ 2830.368964] remap_pfn_range+0x139/0x160 [ 2830.368988] ? remap_pfn_range_notrack+0x70/0x70 [ 2830.369015] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2830.369046] io_uring_mmap+0x398/0x530 [ 2830.369072] mmap_file+0x5e/0xe0 [ 2830.369093] mmap_region+0xc4d/0x1500 [ 2830.369135] do_mmap+0x868/0x1370 [ 2830.369168] vm_mmap_pgoff+0x198/0x1f0 [ 2830.369198] ? randomize_page+0xb0/0xb0 [ 2830.369239] ksys_mmap_pgoff+0x41c/0x560 [ 2830.369288] ? find_mergeable_anon_vma+0x250/0x250 [ 2830.369316] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.369339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.369366] do_syscall_64+0x33/0x40 [ 2830.369387] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.369401] RIP: 0033:0x7f7213914b62 [ 2830.369425] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2830.369494] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2830.369516] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2830.369528] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2830.369540] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2830.369552] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2830.369565] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2830.369603] irq event stamp: 829 [ 2830.369628] hardirqs last enabled at (835): [] vprintk_emit+0x490/0x4e0 [ 2830.369652] hardirqs last disabled at (840): [] vprintk_emit+0x422/0x4e0 [ 2830.369675] softirqs last enabled at (782): [] asm_call_irq_on_stack+0x12/0x20 [ 2830.369699] softirqs last disabled at (771): [] asm_call_irq_on_stack+0x12/0x20 [ 2830.369709] ---[ end trace e0542cfc8b93b3a1 ]--- [ 2830.380272] Module has invalid ELF structures [ 2830.477742] Module has invalid ELF structures [ 2830.566182] Module has invalid ELF structures [ 2830.588741] FAULT_INJECTION: forcing a failure. [ 2830.588741] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.588769] CPU: 0 PID: 20480 Comm: syz-executor.0 Tainted: G W 5.10.252 #1 [ 2830.588781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2830.588788] Call Trace: [ 2830.588816] dump_stack+0x107/0x167 [ 2830.588841] should_fail.cold+0x5/0xa [ 2830.588868] ? ptlock_alloc+0x1d/0x70 [ 2830.588888] should_failslab+0x5/0x20 [ 2830.588909] kmem_cache_alloc+0x5b/0x310 [ 2830.588939] ptlock_alloc+0x1d/0x70 [ 2830.588969] pte_alloc_one+0x68/0x1a0 [ 2830.588991] __pte_alloc+0x1d/0x330 [ 2830.589020] remap_pfn_range_internal+0x9a3/0xf60 [ 2830.589053] ? lookup_memtype+0x5b/0x200 [ 2830.589094] ? apply_to_existing_page_range+0x40/0x40 [ 2830.589132] remap_pfn_range+0xcd/0x160 [ 2830.589156] ? remap_pfn_range_notrack+0x70/0x70 [ 2830.589181] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2830.589212] io_uring_mmap+0x398/0x530 [ 2830.589239] mmap_file+0x5e/0xe0 [ 2830.589260] mmap_region+0xc4d/0x1500 [ 2830.589301] do_mmap+0x868/0x1370 [ 2830.589334] vm_mmap_pgoff+0x198/0x1f0 [ 2830.589361] ? randomize_page+0xb0/0xb0 [ 2830.589403] ksys_mmap_pgoff+0x41c/0x560 [ 2830.589427] ? find_mergeable_anon_vma+0x250/0x250 [ 2830.589455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2830.589478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2830.589504] do_syscall_64+0x33/0x40 [ 2830.589525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2830.589539] RIP: 0033:0x7f7213914b62 [ 2830.589559] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2830.589571] RSP: 002b:00007f7210e8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2830.589594] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7213914b62 [ 2830.589606] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2830.589618] RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 [ 2830.589630] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2830.589642] R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 [ 2830.629406] Module has invalid ELF structures VM DIAGNOSIS: 16:59:21 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8271 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804d40f678 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e82c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8780116700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ab0d025a0 CR3=0000000044e0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8782c877c000007f8782c877c8 XMM02=00007f8782c877e000007f8782c877c0 XMM03=00007f8782c877c800007f8782c877c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff85a23684 RDX=ffff88803e55f980 RSI=0000000000000000 RDI=ffffffff85a23686 RBP=ffff88803e55f975 RSP=ffff88803e55f868 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032047 R11=1ffff11007cabf15 R12=ffff88803e55fd30 R13=ffff88803e55f940 R14=1ffff11007cabf15 R15=ffffffff85a23688 RIP=ffffffff8110a2f3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555571424400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005646235eb708 CR3=000000003e5e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000